Edit

AR

Arunabh R.

Chief Information Security Officer

Mid-Market (51-1000 emp.)

1/27/2023

"Efficiently and Easily Manage Third-Party Code"

5/5

What do you like best about SOOS?

Very easy to set up and has a very good dashboard with insights into OSS licenses and vulnerabilities. I also liked that their tech team was open to ideas and enhancements and suggestions. Review collected by and hosted on G2.com.

What do you dislike about SOOS?

There are a few features that can be extended like single click reports export of all projects but from my interaction with Soos, this is a feature under development. That said, it is also easy to export the reports one project at a time but is a manual effort and time-consuming. Review collected by and hosted on G2.com.

What problems is SOOS solving and how is that benefiting you?

We started with one problem at hand i.e. license management of the OSS packages included in our codebase, then came the vulnerabilities associated with them. Our investors also wanted the license information so that they do not invest in an application that would fall under the public license domain just because certain OSS licenses mandate the code to be made public just by using them.

Soos makes that curation part super easy. Review collected by and hosted on G2.com.

Response from Becca Newton of SOOS

edit

Arunabh, thank you so much for taking the time to review SOOS. Glad we've been able to provide a good experience so far. We are always striving to make the product better, so please keep the feedback coming!

EP

Verified User in Pharmaceuticals

Mid-Market (51-1000 emp.)

6/7/2023

"SOOS delivers everything we need for SCA & DAST"

5/5

What do you like best about SOOS?

We loved that SOOS met all our base requirements for SCA & DAST. The product support and admin support has been wonderful. We have even had positive response about a future feature request we submitted. Hoping for many, many more great features to be added as the product develops. Awesome experience so far! Review collected by and hosted on G2.com.

What do you dislike about SOOS?

We were a bit disappointed that SOOS did not have the Microsoft Azure DevOps integration built in yet. Having said that however, SOOS has committed to bringing this requirement into their roadmap. We are looking forward to seeing this soon! Review collected by and hosted on G2.com.

Response from Kaitlyn Booth of SOOS

edit

Hi there!

Thank you so much for taking your time to leave us a review and share your impressions of our SCA and DAST offerings!

Thank you for helping us highlight the importance of a more robust Azure DevOps integration for current and future customers like yourselves. We have added several items to our development roadmap in Q3&4 this year that we are looking forward to releasing to expand DevOps capabilities.

Feedback like yours is what helps us continue to make our tools meet the needs of our customers. We're always happy to hear any feedback, ideas, or feature requests you may have.

All the best,

Kaitlyn

GO

Gonzalo O.

Small-Business (50 or fewer emp.)

2/8/2023

"Really easy to integrate with SCA"

5/5

What do you like best about SOOS?

When we started using the tool we were surprised by how easy and intuitive it was to

get started, as it only required some basic pipeline-setup knowledge and there are

several examples available that truly "just work". We find the app-provided feedback to be super helpful and actionable. Review collected by and hosted on G2.com.

What do you dislike about SOOS?

We didn’t find any particular low-lights, just a few small nuances, like some

issues being listed as critical (that our team thinks are less critical), or having to manually add the product on each pipeline (as we have 100+ services), but this only has to be done once. Review collected by and hosted on G2.com.

What problems is SOOS solving and how is that benefiting you?

We find the dashboard to be super helpful, as it allows us to easily order issues by criticity and provides the tree of dependencies. Furthermore it also provides several details on each issue & recommended steps to fix each instance.Finally we found the licensing report to be really important, and definitely adds value as it allows to quickly identify licensing implications (e.g. open software usage, incompatible licenses, etc.) Review collected by and hosted on G2.com.

Response from Becca Newton of SOOS

edit

Gonzalo - thank you so much for taking the time to review SOOS! We appreciate your feedback, and are glad to hear the app feedback has been helpful. We appreciate all feedback, so please don't ever hesitate to reach out!

JT

Jacob T.

Software Engineer

Mid-Market (51-1000 emp.)

3/2/2023

"Very useful tool when upgrading and updating existing old infrastructure."

4/5

What do you like best about SOOS?

Getting automated reports generated from Azure DevOps pipelines makes it extremely easy to implement into new or existing workflows and ensure that security concerns are recognised where they may not be otherwise. Review collected by and hosted on G2.com.

What do you dislike about SOOS?

Some features of the website are unintuitive for new users. For example, it is unclear what will happen / needs to happen when a scan discovers packages it does not recognise. Review collected by and hosted on G2.com.

Response from Becca Newton of SOOS

edit

Jacob - thanks for taking the time to review SOOS! We're excited to hear it's been helpful in upgrading your infrastructure. Thanks for the feedback on the new user experience, I will be sure to get this back to the team. Please don't ever hesitate to reach out with additional feedback.

AC

Andrew C.

Small-Business (50 or fewer emp.)

3/3/2023

"The people are friendly and knowledgeable and they build software that is easy to use."

5/5

What do you like best about SOOS?

The implementation was easy and the results are instant. The dashboard is great and allow us to quickly identify problem areas in our apps. Review collected by and hosted on G2.com.

What do you dislike about SOOS?

I would like more feedback when I run the scans so that I dont have to visit the dashboard to get that information. Review collected by and hosted on G2.com.

Response from Becca Newton of SOOS

edit

Thank you for the great review of SOOS Andrew - we really appreciate it! We are always working on improving the platform, and I'll be sure to make the team aware of your concerns on having to consistently go back to the dashboard for information. If you have any other feedback you would like to share, please don't hesitate to contact us.

DR

David R.

Software Engineer

Small-Business (50 or fewer emp.)

10/12/2022

"Simple and does exactly what we want, great support team"

5/5

What do you like best about SOOS?

The support team is quick to respond to our questions and suggestions to improve their software. Additionally, we have tested this product side-by-side with others in the industry and have found it performs better than many others, accurately finding and reporting things that some competing products did not. The flexibility on where and when the SOOS scans run is excellent and we believe their solution is setup in such a way to best handle growth in our company. Review collected by and hosted on G2.com.

What do you dislike about SOOS?

The reporting, while accurate, leaves a lot to be desired in looks and accessibility. We brought up the fact that we would love to have formatted reports that we can easily hand to clients and have them understand with SOOS's support team and we were told this is a feature in development. Looking forward to the final product! Review collected by and hosted on G2.com.

Response from Becca Newton of SOOS

edit

David, thank you so much for taking the time to provide a review of SOOS. We appreciate your feedback and are always striving to improve upon the product. Improved reporting is a priority for us, so stay tuned for more information coming soon!

YC

Yvan C.

Mid-Market (51-1000 emp.)

2/23/2023

"A centralized place to analyze and fix our vulnerabilities"

3.5/5

What do you like best about SOOS?

A unique place where I can easily check the vulnerabilities we have on many repositories. The analysis is pretty quick and the platform well designed which is enable its friendly used. Review collected by and hosted on G2.com.

What do you dislike about SOOS?

The platform is vast and I feel lost sometimes between the table. I need to spend more time on the documentation to understand it well. Review collected by and hosted on G2.com.

Response from Becca Newton of SOOS

edit

Thank you for your feedback Yvan, we truly appreciate it. We realize there is a lot of information on the SOOS platform, and are more than willing to spend some time walking through it. Please contact us if that would be helpful. Thanks!

AC

Verified User in Computer Software

Mid-Market (51-1000 emp.)

5/8/2023

"Easy to Use Product with Good Support"

5/5

What do you like best about SOOS?

It is easy to navigate around the website and setup integration with GitHub. The price is very affordable. Review collected by and hosted on G2.com.

What do you dislike about SOOS?

While it may not have all of the same features as other software, they did already take our suggestion and released an update to include a feature we needed. Review collected by and hosted on G2.com.

Response from Kaitlyn Booth of SOOS

edit

Hi there - We really appreciate you taking the time to review SOOS!

We are so glad to hear that the GitHub integration and app UI are easy to use and that you are getting value out of the product. I'm also happy we could improve your experience by adding a feature request.

Users like you are what help us drive the direction of the product, so please don't hesitate to keep the suggestions coming!

MF

Matthew F.

Mid-Market (51-1000 emp.)

6/9/2023

"Strong vulnerability management product, fast ui, and responsive team"

4.5/5

What do you like best about SOOS?

I liked how quickly feature requests were addressed. I really appreciate the speed of the solution, the ui doesn't drag at all. It's cheap! Review collected by and hosted on G2.com.

What do you dislike about SOOS?

I wish there was stronger support for bitbucket, particularly automated PR requests. Review collected by and hosted on G2.com.

Response from Kaitlyn Booth of SOOS

edit

Hi there!

Thank you so much for taking your time to leave us a review and share your impressions of our SCA and DAST offerings!

We absolutely want to expand to provide support for direct Bitbucket integration, much like the integration we offer now for GitHub. We've got a Bitbucket integration epic on our development roadmap and are chipping away in that direction. We'll send out an announcement when the time comes but please feel free to check in with us if you're interested in the status.

We're also glad to hear SOOS is helping you keep your SOC2 tasks under control!

All the best,

Kaitlyn

All the best,

Kaitlyn

EI

Verified User in Information Technology and Services

Small-Business (50 or fewer emp.)

5/3/2023

"Still learning how to tune the product"

3/5

What do you like best about SOOS?

Provides a nice way to manage supply chain defenses Review collected by and hosted on G2.com.

What do you dislike about SOOS?

Seems to over-include packages, creating false positives for things that aren't in our BOM. Need to understand how to configure the system to get a more accurate result.

Also, would like a CSV export of vulnerability data to make it possible to create necessary reports for stakeholders. Review collected by and hosted on G2.com.

Response from Kaitlyn Booth of SOOS

edit

Hi there - Thank you for sharing your impressions on your use of our tool!

I wanted to provide some insight regarding the inclusion of packages not directly declared in your BOM. By default SOOS inspects not only your direct dependencies, but also your transitive dependencies to ensure that we find any issues, including those lurking deep in your dependency tree. This can be a shock if you've been using other tools that only look at your direct dependencies. You can see this within the dependency tab of your project details along with the introduction paths that will tell you exactly where that dependency came from.

That said, this dependency tree scan depth setting is customizable either globally or at the project level so you can configure your scans to only inspect direct dependencies if you would prefer that. Additionally, you can choose to include or ignore dev/test dependencies, and/or use lock files as the source for the dependency tree.

We're confident in our abilities to locate issues and resolve dependencies, but if you think you found a problem, definitely let the support team know and we'll take a look. We are also more than happy to provide you guidance and resources so you can fine-tune your scans in a way that better fits your needs.

You can get in touch with SOOS Support using the 'Help' link in the left nav. menu within the app or using the support widget found on our main site.

As for CSV exports, these are on our list to be added soon! In the meantime we have many other export options, including SARIF, SPDX SBOMs, VEX, and CycloneDX SBOMs in a variety of file types (JSON, HTML, Text, HTML).