# Best Vulnerability Scanner Software - Page 2 *By [Lauren Worth](https://research.g2.com/insights/author/lauren-worth)* Vulnerability scanners continuously monitor applications and networks against an up-to-date database of known vulnerabilities, identifying potential exploits, producing analytical reports on the security state of applications and networks, and providing recommendations to remedy known issues. ### Core Capabilities of Vulnerability Scanner Software To qualify for inclusion in the Vulnerability Scanner category, a product must: - Maintain a database of known vulnerabilities - Continuously scan applications for vulnerabilities - Produce reports analyzing known vulnerabilities and new exploits ### Common Use Cases for Vulnerability Scanner Software Security and IT teams use vulnerability scanners to proactively identify and address weaknesses before they can be exploited. Common use cases include: - Running scheduled and on-demand scans of applications and network infrastructure for known CVEs - Generating prioritized vulnerability reports to guide remediation efforts - Testing application and network security posture as part of ongoing compliance and risk management programs ### How Vulnerability Scanner Software Differs from Other Tools Some vulnerability scanners operate similarly to [dynamic application security testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast) tools, but the key distinction is that vulnerability scanners test applications and networks against known vulnerability databases rather than mimicking real-world attacks or performing penetration tests. DAST tools simulate attacker behavior to uncover runtime vulnerabilities, while scanners focus on identification and reporting of known weaknesses. ### Insights from G2 on Vulnerability Scanner Software Based on category trends on G2, continuous scanning and comprehensive vulnerability reporting stand out as standout capabilities. Faster identification of critical exposures and improved compliance readiness stand out as primary benefits of adoption. ## Top Vulnerability Scanner Software at a Glance | # | Product | Rating | Best For | What Users Say | |---|---------|--------|----------|----------------| | 1 | [Wiz](https://www.g2.com/products/wiz-wiz/reviews) | 4.7/5.0 (817 reviews) | Risk-based cloud vulnerability prioritization with context | "[Wiz Delivers Clear Visibility Into Cloud Risks That Truly Matter](https://www.g2.com/survey_responses/wiz-review-12960477)" | | 2 | [Orca Security](https://www.g2.com/products/orca-security/reviews) | 4.7/5.0 (282 reviews) | Agentless cloud vulnerability scanning with contextual risk prioritization | "[Orca Brings Clear Visibility and Control to Our Growing Fleet of AI Agents](https://www.g2.com/survey_responses/orca-security-review-13058233)" | | 3 | [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) | 4.5/5.0 (289 reviews) | Credentialed infrastructure scans with compliance auditing | "[Self-Contained Nessus Scanning with Full Control in Offline Environments](https://www.g2.com/survey_responses/tenable-nessus-review-12937668)" | | 4 | [Aikido Security](https://www.g2.com/products/aikido-security/reviews) | 4.6/5.0 (145 reviews) | Auto-triaged DevSecOps scanning with low false positives | "[Effortless Security Testing with Comprehensive Coverage](https://www.g2.com/survey_responses/aikido-security-review-12747129)" | | 5 | [Intruder](https://www.g2.com/products/intruder/reviews) | 4.8/5.0 (206 reviews) | Continuous vulnerability scanning with emerging threat detection | "[Intruder: Insightful Vulnerability Management Platform That Strengthens Security Operation](https://www.g2.com/survey_responses/intruder-review-12395645)" | | 6 | [Sysdig Secure](https://www.g2.com/products/sysdig-sysdig-secure/reviews) | 4.8/5.0 (110 reviews) | Runtime vulnerability detection in Kubernetes workloads | "[Excellent Real-Time Kubernetes Security Visibility and Threat Detection](https://www.g2.com/survey_responses/sysdig-secure-review-12711991)" | | 7 | [Astra Pentest](https://www.g2.com/products/astra-pentest/reviews) | 4.6/5.0 (203 reviews) | SaaS pentest certification with manual validation | "[Smooth Onboarding, Responsive Support, and Strong Pentest Lifecycle Controls](https://www.g2.com/survey_responses/astra-pentest-review-13001206)" | | 8 | [Burp Suite](https://www.g2.com/products/burp-suite/reviews) | 4.8/5.0 (126 reviews) | Manual web application penetration testing workflows | "[Complete Control Over Web Requests with Burp Suite](https://www.g2.com/survey_responses/burp-suite-review-12677559)" | | 9 | [CrowdStrike Falcon Cloud Security](https://www.g2.com/products/crowdstrike-falcon-cloud-security/reviews) | 4.6/5.0 (98 reviews) | — | "[Quiet, Unobtrusive Endpoint Security That Just Works](https://www.g2.com/survey_responses/crowdstrike-falcon-cloud-security-review-12973136)" | | 10 | [SentinelOne Singularity Cloud Security](https://www.g2.com/products/sentinelone-singularity-cloud-security/reviews) | 4.9/5.0 (114 reviews) | — | "[Unified Multi-Cloud Security with AI-Driven Automation and Real-Time Threat Detection](https://www.g2.com/survey_responses/sentinelone-singularity-cloud-security-review-13002699)" | --- ## What Are the Most Common Questions About Vulnerability Scanner Software? *AI-generated · Last updated: May 26, 2026* ### What platform provides detailed vulnerability reporting and analytics? Based on G2 reviews, several vulnerability scanner software products are praised for detailed reporting and clear visibility into findings. According to verified users, Tenable Nessus stands out for detailed reports, audit-friendly outputs, and remediation suggestions, while Intruder reviewers mention clear dashboards and practical reporting that help teams understand and act on issues quickly. G2 reviewers also mention Edgescan for trend reporting, time-to-resolve visibility, and dashboards that help track remediation progress over time. Buyers looking for strong reporting and analytics often value products that combine understandable findings with prioritization and historical visibility so teams can communicate risk clearly and manage remediation more efficiently. ### What platform integrates scanning with patch management systems? Based on G2 reviews, products in this category often support remediation workflows by helping teams connect findings to patching or operational processes. According to verified users, CyberSmart is noted for patch management alongside vulnerability visibility, helping teams see outdated systems and remediate them from the same workflow. G2 reviewers also mention ConnectSecure Vulnerability and Compliance Manager and APPCHECK as tools that support organized remediation, while Qualys and Tenable products are described as integrating findings into broader operational environments. Buyers evaluating vulnerability scanner software for this use case should prioritize products reviewers say make it easier to move from finding issues to coordinating fixes, especially when patching and compliance work need to stay tightly connected. ### What is the most affordable vulnerability scanner for SMBs? Based on G2 reviews, affordability for SMBs is usually described in terms of value, ease of setup, and reduced manual work rather than exact pricing. According to verified users, Aikido Security is frequently described as friendly for small and mid-sized businesses, with reviewers highlighting strong value and straightforward setup. G2 reviewers also mention Intruder as cost-effective and easy to operate, while Offensity is noted as an affordable way to stay on top of cyber risks without hiring dedicated experts. For SMB buyers, the strongest value signals in recent reviews come from products that combine simple onboarding, actionable findings, and automation that reduces the need for extra security staffing. **Here are some of the top-rated products on G2:** - [Aikido Security](https://www.g2.com/products/aikido-security/reviews/aikido-security-review-11660004) – reviewers describe it as suitable for SMBs with broad automated security testing and simple setup - [Intruder](https://www.g2.com/products/intruder/reviews/intruder-review-11847236) – users highlight cost-effective scanning, easy implementation, and low operational overhead - [Offensity](https://www.g2.com/products/offensity/reviews/offensity-review-11393651) – reviewers call out affordability and continuous automated scans for smaller teams ### Which vendor offers automated remediation guidance for vulnerabilities? Based on G2 reviews, several vendors are recognized for helping teams move from findings to fixes with clear remediation guidance. According to verified users, Wiz is frequently praised for actionable remediation steps, contextual prioritization, and guidance that helps security and engineering teams understand what to fix first. G2 reviewers also mention Tenable Nessus for helpful remediation tips and APPCHECK for making vulnerability assignment and management easier. Buyers looking for vulnerability scanner software with strong remediation support should focus on products reviewers say reduce manual triage, explain issues clearly, and provide practical next steps instead of only listing findings. ### Which solution supports vulnerability scanning for cloud environments? Based on G2 reviews, cloud vulnerability scanning is a major strength for multiple products in this category. According to verified users, Wiz is repeatedly praised for broad visibility across cloud environments, including vulnerabilities, misconfigurations, and risk prioritization in a single platform. G2 reviewers also mention Orca Security for agentless cloud scanning and centralized visibility, while Intruder and CrowdStrike Falcon Cloud Security are described as helping teams monitor cloud assets and workloads more effectively. Buyers focused on cloud use cases should look for recent review themes around fast onboarding, multi-cloud visibility, and the ability to prioritize real risks rather than simply generating large volumes of alerts. ### What is the top-rated vulnerability scanner for large organizations? Based on G2 reviews, Wiz appears most frequently in recent feedback and is consistently described as a strong fit for large, complex environments. According to verified users, it helps organizations unify cloud visibility, reduce alert fatigue, and prioritize risks across broad environments without adding heavy deployment friction. G2 reviewers mention benefits such as multi-cloud visibility, strong collaboration across security and engineering teams, and support for scaling security operations in complex estates. For large organizations, the most common recent themes are broad coverage, contextual prioritization, and the ability to consolidate multiple security workflows into one platform, all of which are repeatedly associated with Wiz in the supplied review set. ### What is the best vulnerability scanning tool for enterprise IT teams? Based on G2 reviews, Wiz is the strongest recent fit for enterprise IT teams because reviewers repeatedly describe it as helping large teams unify visibility, prioritize meaningful risks, and coordinate remediation across complex environments. According to verified users, it reduces noise by connecting vulnerabilities, misconfigurations, and exposures in context, which helps enterprise teams focus their efforts more effectively. G2 reviewers also mention fast onboarding, strong integrations, and better collaboration between security, infrastructure, and engineering teams. In the supplied review set, those enterprise-focused themes appear most consistently around Wiz, making it the clearest recent answer for buyers seeking a broad, scalable vulnerability scanner software platform. ### Which tool supports scanning for compliance with industry standards? Based on G2 reviews, several tools are used to support compliance-driven vulnerability scanning. According to verified users, Tenable Nessus is commonly mentioned for helping teams scan against recognized standards and create reports for audit and compliance use cases. G2 reviewers also mention Intruder for ongoing scanning tied to compliance workflows, CyberSmart for Cyber Essentials-related monitoring, and Wiz for supporting PCI, SOC, and broader compliance visibility in cloud environments. Buyers looking for compliance-focused vulnerability scanner software should prioritize tools reviewers say generate understandable reports, surface remediation clearly, and fit into recurring audit or certification processes without adding heavy manual work. ### Which vendor provides real-time vulnerability detection and alerts? Based on G2 reviews, real-time or continuously updated visibility is a common requirement for buyers who need fast response to new issues. According to verified users, Wiz is repeatedly described as providing rapid visibility into vulnerabilities and risks across cloud environments, with contextual prioritization that helps teams respond faster. G2 reviewers also mention Intruder for automatic scanning and timely notifications, while CyberSmart is noted for real-time style reporting on vulnerabilities and patching needs. For this use case, buyers should look for products that reviewers say combine continuous monitoring with useful alerts, so teams can act quickly without being buried in low-value noise. ### Which vulnerability scanner offers the most accurate network security assessments? Based on G2 reviews, Tenable Nessus is one of the clearest choices for accurate network-focused assessments. According to verified users, it is praised for high scanning accuracy, broad plugin coverage, clear reports, and fast identification of vulnerabilities across networks and hybrid environments. G2 reviewers mention that it helps uncover hidden issues, supports regular scanning, and provides actionable remediation tips that make findings easier to address. Other products in the dataset also support network visibility, but Nessus is the one most directly associated in recent reviews with accurate, dependable vulnerability assessments for network assets and infrastructure. ## How Many Vulnerability Scanner Software Products Does G2 Track? **Total Products under this Category:** 222 ### Category Stats (Jul 2026) - **Average Rating**: 4.58/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product**: CybaOps (+8.33%) - Among all products in this category, CybaOps recorded the largest rating increase compared to last month *Last updated: July 04, 2026* ## How Does G2 Rank Vulnerability Scanner Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 7,300+ Authentic Reviews - 222+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## Which Vulnerability Scanner Software Is Best for Your Use Case? - **Leader:** [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - **Highest Performer:** [BugDazz API Scanner](https://www.g2.com/products/bugdazz-api-scanner/reviews) - **Easiest to Use:** [Orca Security](https://www.g2.com/products/orca-security/reviews) - **Top Trending:** [Aikido Security](https://www.g2.com/products/aikido-security/reviews) - **Best Free Software:** [Wiz](https://www.g2.com/products/wiz-wiz/reviews) --- **Sponsored** ### Aikido Security Aikido Security is the developer-first security platform that unifies code, cloud, protection, and attack testing in one suite of best-in-class products. Built by developers for developers, Aikido helps teams of any size ship secure software faster, automate protection, and simulate real-world attacks with AI-driven precision. The platform’s proprietary AI cuts noise by 95%, delivers one-click fixes, and saves developers 10+ hours per week. Aikido Intel proactively uncovers vulnerabilities in open source packages before disclosure, helping secure more than 50,000 organizations worldwide, including Revolut, Niantic, Visma, Montblanc, and GoCardless. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1423&secure%5Bchosen_at%5D=2026-07-05T07%3A53%3A02Z&secure%5Bdisplayable_resource_id%5D=1423&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1423&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=1259627&secure%5Bresource_id%5D=1423&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fvulnerability-scanner&secure%5Btoken%5D=3a55875463b13f8e4ed297af5f8fb0a815f4b3c36b23fcd986551f81eedc96f1&secure%5Burl%5D=https%3A%2F%2Fwww.aikido.dev%2Fuse-cases%2Fvulnerability-management%3Futm_source%3Dg2%26utm_campaign%3Dg2-promoted-listing-vulnerability-mgmt%26utm_medium%3Dcpc&secure%5Burl_type%5D=custom_url) --- ## Vulnerability Scanner Software Features & Capabilities ### What are the Best Vulnerability Scanner Software with Compliance Testing? Allows users to scan applications and networks for specific compliance requirements. **Top-rated Vulnerability Scanner Software for Compliance Testing:** - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - [Orca Security](https://www.g2.com/products/orca-security/reviews) - [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) [Explore Vulnerability Scanner Software with Compliance Testing](https://www.g2.com/categories/vulnerability-scanner/f/compliance-testing) ### What are the Best Vulnerability Scanner Software with Perimeter Scanning? Analyzes network devices, servers and operating systems for vulnerabilities. **Top-rated Vulnerability Scanner Software for Perimeter Scanning:** - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - [Orca Security](https://www.g2.com/products/orca-security/reviews) - [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) [Explore Vulnerability Scanner Software with Perimeter Scanning](https://www.g2.com/categories/vulnerability-scanner/f/perimeter-scanning) ### What are the Best Vulnerability Scanner Software with Manual Application Testing? Allows users to perfrom hands-on live simulations and penetration tests. **Top-rated Vulnerability Scanner Software for Manual Application Testing:** - [Orca Security](https://www.g2.com/products/orca-security/reviews) - [Aikido Security](https://www.g2.com/products/aikido-security/reviews) - [Intruder](https://www.g2.com/products/intruder/reviews) [Explore Vulnerability Scanner Software with Manual Application Testing](https://www.g2.com/categories/vulnerability-scanner/f/manual-application-testing) ### What are the Best Vulnerability Scanner Software with Static Code Analysis? Scans application source code for security flaws without executing it. **Top-rated Vulnerability Scanner Software for Static Code Analysis:** - [Orca Security](https://www.g2.com/products/orca-security/reviews) - [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) - [Aikido Security](https://www.g2.com/products/aikido-security/reviews) [Explore Vulnerability Scanner Software with Static Code Analysis](https://www.g2.com/categories/vulnerability-scanner/f/static-code-analysis) ### What are the Best Vulnerability Scanner Software with Automated Scans? Runs pre-scripted vulnerability scans without requiring manual work. **Top-rated Vulnerability Scanner Software for Automated Scans:** - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - [Orca Security](https://www.g2.com/products/orca-security/reviews) - [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) [Explore Vulnerability Scanner Software with Automated Scans](https://www.g2.com/categories/vulnerability-scanner/f/automated-scans) ## What Are the Top-Rated Vulnerability Scanner Software Products in 2026? ### 1. [BugDazz API Scanner](https://www.g2.com/products/bugdazz-api-scanner/reviews) BugDazz API Security Scanner by SecureLayer7 is a comprehensive tool designed to automatically detect vulnerabilities, misconfigurations, and security gaps in API endpoints, aiding security teams in protecting digital assets against increasing API-related threats and potential exploits. It offers real-time scanning capabilities, enabling the automatic detection of vulnerabilities as they arise. It supports authentication and access control management, allowing for the management of API controls within a single platform. BugDazz assists in achieving compliance by accelerating the generation of reports for standards such as PCI DSS and HIPAA. It integrates seamlessly with existing CI/CD pipelines, facilitating the acceleration of product rollouts. The scanner goes beyond standard OWASP Top 10 vulnerabilities, providing comprehensive protection against critical API security risks. **Average Rating:** 4.9/5.0 **Total Reviews:** 11 **How Do G2 Users Rate BugDazz API Scanner?** - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10) - **Detection Rate:** 9.8/10 (Category avg: 8.9/10) - **Automated Scans:** 9.5/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 9.3/10 (Category avg: 8.4/10) **Who Is the Company Behind BugDazz API Scanner?** - **Seller:** [SecureLayer7](https://www.g2.com/sellers/securelayer7) - **Year Founded:** 2012 - **HQ Location:** Pune, Maharshtra - **Twitter:** @SecureLayer7 (2,522 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/securelayer7/ (127 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 91% Small-Business, 9% Mid-Market #### What Are BugDazz API Scanner's Pros and Cons? **Pros:** - Accuracy of Results (4 reviews) - CD Integration (4 reviews) - CI (4 reviews) - Ease of Use (4 reviews) - Scanning Technology (4 reviews) **Cons:** - Poor Documentation (2 reviews) - Difficult Learning Curve (1 reviews) - Lack of Guidance (1 reviews) - Lack of Information (1 reviews) - Learning Curve (1 reviews) ### What Do G2 Reviewers Say About BugDazz API Scanner? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **accuracy of results** from BugDazz API Scanner, facilitating clearer, more productive team discussions. - Users value the **seamless CD integration** of BugDazz, enhancing workflow efficiency and enabling fast, accurate scans. - Users appreciate the **s seamless integration with CI/CD workflows** , enhancing efficiency and collaboration across security and engineering teams. - Users commend the **ease of use** of BugDazz API Scanner, facilitating smooth integration into existing workflows and rapid adoption. - Users value the **effective scanning technology** of BugDazz API Scanner for fast, accurate results in CI/CD workflows. **Cons:** - Users find the **poor documentation** a barrier, especially for infrastructure-specific guidance and Jenkins integration clarity. - Users report a **difficult learning curve** with BugDazz API Scanner, needing time to effectively tune scans for testing. - Users feel there is a **lack of guidance** in the documentation, particularly for infrastructure-specific scenarios. - Users feel the **lack of infrastructure-specific guidance** in the BugDazz API Scanner documentation hinders effective use. - Users note a **learning curve** with BugDazz API Scanner, requiring time to master tuning scans for various scenarios. #### What Are Recent G2 Reviews of BugDazz API Scanner? **"[Good tool for security teams](https://www.g2.com/survey_responses/bugdazz-api-scanner-review-12300254)"** **Rating:** 4.5/5.0 stars *— Khaja moinuddin F.* [Read full review](https://www.g2.com/survey_responses/bugdazz-api-scanner-review-12300254) --- **"[Effective scanner and fits well into our release workflow](https://www.g2.com/survey_responses/bugdazz-api-scanner-review-12381013)"** **Rating:** 4.5/5.0 stars *— Kabilesh kumar K.* [Read full review](https://www.g2.com/survey_responses/bugdazz-api-scanner-review-12381013) --- ### 2. [Saner CVEM](https://www.g2.com/products/saner-cvem/reviews) Prevention-first Vulnerability and Exposure Management for unified visibility, prioritization, compliance, and remediation Saner Continuous Vulnerability and Exposure Management unifies asset exposure, posture anomaly detection, vulnerability assessment, compliance management, risk prioritization, patching, and endpoint actions in one dashboard. Saner CVEM is built to help teams continuously detect, assess, prioritize, and remediate vulnerabilities and other security risks from a unified console Why Choose Saner CVEM? • Unified dashboard with interactive views across visibility, detection, prioritization, and remediation for a single source of truth • Complete asset visibility across endpoint and non-endpoint devices, operating system applications, third-party applications, and lifecycle changes • Continuous risk discovery with rapid scans, daily-updated risk intelligence, and posture anomaly detection that helps surface outliers and misconfigurations faster • Context-driven prioritization with SSVC categories such as Act, Attend, Track, and Track\* so teams can focus on the risks that deserve action first. • Continuous compliance management with built-in templates, customizable profiles, daily checks, and deviation tracking across common frameworks. • Integrated patching and remediation with vulnerability-to-patch mapping, automated deployment workflows, and endpoint actions from the same ecosystem. • Machine-learning-assisted analysis to identify deeper risk patterns, detect unusual posture, and support smarter remediation decisions. • Customizable, audit-ready reporting for security, IT, and compliance teams that need clearer evidence and easier tracking. • Flexible deployment on cloud or on-premises, with remediation support across Windows, Linux, macOS, and AIX environments. **Average Rating:** 4.5/5.0 **Total Reviews:** 72 **How Do G2 Users Rate Saner CVEM?** - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.2/10) - **Detection Rate:** 8.9/10 (Category avg: 8.9/10) - **Automated Scans:** 9.2/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 9.1/10 (Category avg: 8.4/10) **Who Is the Company Behind Saner CVEM?** - **Seller:** [SecPod](https://www.g2.com/sellers/secpod-b11d8014-d8ec-46e7-9e81-c0d14919fbfc) - **Company Website:** https://www.secpod.com/ - **Year Founded:** 2008 - **HQ Location:** Redwood City, California - **Twitter:** @secpod (542 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/secpod-technologies/ (168 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 41% Small-Business, 38% Mid-Market #### What Are Saner CVEM's Pros and Cons? **Pros:** - Security (14 reviews) - Features (12 reviews) - Ease of Use (10 reviews) - Customer Support (9 reviews) - Compliance Management (8 reviews) **Cons:** - Integration Issues (5 reviews) - Expensive (4 reviews) - Limited Features (4 reviews) - Slow Performance (4 reviews) - Slow Scanning (4 reviews) ### What Do G2 Reviewers Say About Saner CVEM? *AI-generated summary from verified user reviews* **Pros:** - Users value the **enhanced security** provided by Saner CVEM, streamlining patch management for hybrid workforces efficiently. - Users value the **automated endpoint security** of Saner CVEM, streamlining compliance and patch management for hybrid workforces. - Users appreciate the **ease of use** of Saner CVEM, highlighting its fast scanning and intuitive interface. - Users value the **responsive customer support** from Saner CVEM, enhancing their experience and addressing concerns effectively. - Users value the **automation of compliance tracking** in Saner CVEM, enhancing efficiency and audit readiness for hybrid teams. **Cons:** - Users face **integration issues** with Saner CVEM, requiring workarounds and custom solutions for effective functionality. - Users find the **pricing high** , especially small businesses, making it less accessible for new users. - Users find the **limited features** of Saner CVEM challenging, particularly regarding multi-tenant support and integrations. - Users experience **slow performance** when loading dashboards and managing large datasets, affecting daily checks and usability. - Users experience **slow scanning** with initial dashboard load times, affecting daily checks on large data sets. #### What Are Recent G2 Reviews of Saner CVEM? **"[Strong Visibility Across Assets, but Prioritization and UI Need Improvement](https://www.g2.com/survey_responses/saner-cvem-review-12398463)"** **Rating:** 4.0/5.0 stars *— Verified User in Pharmaceuticals* [Read full review](https://www.g2.com/survey_responses/saner-cvem-review-12398463) --- **"[Improve your digital security and combat vulnerabilities in your networks with Saner CVEM.](https://www.g2.com/survey_responses/saner-cvem-review-11395327)"** **Rating:** 5.0/5.0 stars *— Lydie D.* [Read full review](https://www.g2.com/survey_responses/saner-cvem-review-11395327) --- #### What Are G2 Users Discussing About Saner CVEM? - [What is SanerNow used for?](https://www.g2.com/discussions/what-is-sanernow-used-for) ### 3. [Invicti (formerly Netsparker)](https://www.g2.com/products/invicti-formerly-netsparker/reviews) Invicti (formerly known as Netsparker) is an enterprise application and API security testing platform that helps organizations secure thousands of web applications and APIs at scale while dramatically reducing the risk of attack. Combining advanced DAST and IAST capabilities in a single platform, Invicti enables security teams to continuously identify, prioritize, and remediate vulnerabilities across complex modern environments with confidence and automation. With Invicti, security teams can: - Automate application security testing workflows and save hundreds of hours every month - Discover and secure all web applications and APIs, including forgotten, unmanaged, and shadow assets - Deliver actionable, developer-friendly feedback that helps teams remediate vulnerabilities faster and build more secure code over time - Reduce false positives with proof-based scanning technology that validates exploitable vulnerabilities - Scale application security programs across large enterprises without slowing development teams - Integrate security seamlessly into existing DevSecOps and CI/CD workflows Built for organizations with the most demanding security requirements, Invicti empowers teams to confidently secure their entire attack surface with accuracy, scalability, and automation. **Average Rating:** 4.6/5.0 **Total Reviews:** 66 **How Do G2 Users Rate Invicti (formerly Netsparker)?** - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10) - **Detection Rate:** 9.0/10 (Category avg: 8.9/10) - **Automated Scans:** 9.1/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 8.3/10 (Category avg: 8.4/10) **Who Is the Company Behind Invicti (formerly Netsparker)?** - **Seller:** [Invicti Security](https://www.g2.com/sellers/invicti-security-04cb0d3d-fd96-45b2-83dc-2038fc9dac92) - **Company Website:** https://www.invicti.com/ - **Year Founded:** 2018 - **HQ Location:** Austin, Texas - **Twitter:** @InvictiSecurity (2,557 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/invicti-security/people/ (335 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 46% Enterprise, 28% Mid-Market #### What Are Invicti (formerly Netsparker)'s Pros and Cons? **Pros:** - Ease of Use (9 reviews) - Scanning Technology (7 reviews) - Features (6 reviews) - Reporting Quality (6 reviews) - Vulnerability Detection (6 reviews) **Cons:** - Poor Customer Support (3 reviews) - Slow Performance (3 reviews) - Slow Scanning (3 reviews) - API Issues (2 reviews) - Complex Setup (2 reviews) ### What Do G2 Reviewers Say About Invicti (formerly Netsparker)? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** of Invicti, enabling quick setup and efficient security testing for all team members. - Users value the **scanning technology** of Invicti for its user-friendliness and efficient vulnerability detection. - Users praise Invicti's **accuracy and integration capabilities** , enhancing security testing and streamlining workflows in development. - Users value the **well-formatted and comprehensive reports** from Invicti, facilitating smooth ISO certification processes. - Users value the **effective vulnerability detection** by Invicti, appreciating its user-friendly interface and detailed reporting. **Cons:** - Users find **customer support lacking** , often experiencing slow response times and ineffective solutions to their issues. - Users experience **slow performance** during scans and setup, affecting efficiency while using Invicti. - Users experience **slow scanning** speeds and find API scanning capabilities lacking, impacting their overall effectiveness. - Users experience **API issues** that hinder functionality, preventing effective use of Invicti for API scanning tasks. - Users find the **complex setup** of Invicti challenging, especially with nested menus that hinder easy configuration. #### What Are Recent G2 Reviews of Invicti (formerly Netsparker)? **"[Scalable Enterprise Security: Deep Endpoint Coverage via Invicti](https://www.g2.com/survey_responses/invicti-formerly-netsparker-review-12742667)"** **Rating:** 4.5/5.0 stars *— Verified User in Information Technology and Services* [Read full review](https://www.g2.com/survey_responses/invicti-formerly-netsparker-review-12742667) --- **"[Effortless Website Testing with Outstanding Support](https://www.g2.com/survey_responses/invicti-formerly-netsparker-review-11850923)"** **Rating:** 4.5/5.0 stars *— Chris M.* [Read full review](https://www.g2.com/survey_responses/invicti-formerly-netsparker-review-11850923) --- #### What Are G2 Users Discussing About Invicti (formerly Netsparker)? - [What is Invicti (formerly Netsparker) used for?](https://www.g2.com/discussions/what-is-invicti-formerly-netsparker-used-for) - 1 comment - [What type of vulnerabilities Netsparker can automatically confirm?](https://www.g2.com/discussions/invicti-formerly-netsparker-what-type-of-vulnerabilities-netsparker-can-automatically-confirm) - [What type of vulnerabilities Netsparker can automatically confirm?](https://www.g2.com/discussions/what-type-of-vulnerabilities-netsparker-can-automatically-confirm) - [How much does Netsparker cost?](https://www.g2.com/discussions/invicti-formerly-netsparker-how-much-does-netsparker-cost-a1ecffa4-a216-4bcc-affd-40dc140f3e27) - [How much does Netsparker cost?](https://www.g2.com/discussions/invicti-formerly-netsparker-how-much-does-netsparker-cost) ### 4. [Armor Agent](https://www.g2.com/products/armor-agent/reviews) Armor Agent protects Windows and Linux servers wherever they run, in public cloud, private cloud, or on-premises environments, with a single, lightweight agent that installs with one line of code. The agent combines malware protection, intrusion prevention (IDS/IPS), file integrity monitoring, vulnerability scanning, patch monitoring, and behavioral threat detection into one deployment. Rather than stitching together multiple point tools, Armor Agent consolidates core workload security into a unified agent managed through the Armor platform. Armor Agent is available in two tiers. The Free Tier covers up to 5 endpoints at no cost, with full malware and intrusion defense, vulnerability scanning, patch monitoring, and file integrity monitoring included. The Premium Tier adds security alerts, log search, threat intelligence, threat hunting, dedicated support, and 24×7 SOC monitoring at $99/month per endpoint with no endpoint limit. Both tiers support compliance requirements for HIPAA, PCI DSS, HITRUST, and ISO frameworks. Get started with the Free Tier at https://www.armor.com/free/armor-agent **Average Rating:** 4.8/5.0 **Total Reviews:** 12 **How Do G2 Users Rate Armor Agent?** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10) - **Detection Rate:** 9.2/10 (Category avg: 8.9/10) - **Automated Scans:** 9.0/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 10.0/10 (Category avg: 8.4/10) **Who Is the Company Behind Armor Agent?** - **Seller:** [Armor](https://www.g2.com/sellers/armor) - **Year Founded:** 2009 - **HQ Location:** Plano, Texas - **Twitter:** @Armor (9,748 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/333863/ (204 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 83% Small-Business, 17% Mid-Market #### What Are Recent G2 Reviews of Armor Agent? **"[Best Vulnerability tracking and Support](https://www.g2.com/survey_responses/armor-agent-review-5148529)"** **Rating:** 5.0/5.0 stars *— Yeou Sunn L.* [Read full review](https://www.g2.com/survey_responses/armor-agent-review-5148529) --- **"[Armor Anywhere review](https://www.g2.com/survey_responses/armor-agent-review-5137320)"** **Rating:** 4.5/5.0 stars *— Rakesh P.* [Read full review](https://www.g2.com/survey_responses/armor-agent-review-5137320) --- #### What Are G2 Users Discussing About Armor Agent? - [What is Armor Anywhere used for?](https://www.g2.com/discussions/what-is-armor-anywhere-used-for) ### 5. [Pentest-Tools.com](https://www.g2.com/products/pentest-tools-com/reviews) Discover what's possible. Prove what's real. With proprietary tech and key experts in offensive security. Pentest-Tools.com is built for actual security testing, not just detection. We provide the coverage, consolidation, and automation cybersecurity teams need to optimize vulnerability assessment workflows. And we ensure the depth, control, and customization on which professional pentesters count to increase engagement quality and profitability. ✔️ Comprehensive toolkit with real-world coverage ✔️ Validated findings rich with evidence ✔️ Automation options with granular control ✔️ Flexible, high-quality reporting ✔️ Workflow-friendly by design Optimize and scale penetration testing and vulnerability assessment workflows - without sacrificing accuracy, control, or manual testing depth. 🎯 Attack surface mapping and recon 🎯 Comprehensive vulnerability scanning 🎯 Vulnerability exploitation 🎯 Customizable pentest reporting and data exports 🎯 Continuous vulnerability monitoring In our company, we build what we use We launched Pentest-Tools.com in 2017 as a team of professional penetration testers - and we've kept that mindset ever since. Our experts still drive product development today, focusing relentlessly on accuracy, speed, and control. Every new feature, detection, and workflow comes from real-world experience. We constantly improve the product with updated attack techniques, smarter automation, and validation that reflects how malicious hackers actually operate - so your team can deliver security work that's faster, more visible, and built on proof. **Average Rating:** 4.8/5.0 **Total Reviews:** 100 **How Do G2 Users Rate Pentest-Tools.com?** - **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.2/10) - **Detection Rate:** 8.5/10 (Category avg: 8.9/10) - **Automated Scans:** 9.2/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 7.6/10 (Category avg: 8.4/10) **Who Is the Company Behind Pentest-Tools.com?** - **Seller:** [Pentest-Tools.com](https://www.g2.com/sellers/pentest-tools-com) - **Year Founded:** 2017 - **HQ Location:** Sectorul 1, Bucharest - **Twitter:** @pentesttoolscom (4,062 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/33242531/ (63 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** CEO - **Top Industries:** Computer & Network Security, Information Technology and Services - **Company Size:** 65% Small-Business, 20% Mid-Market #### What Are Pentest-Tools.com's Pros and Cons? **Pros:** - Ease of Use (6 reviews) - Automation (4 reviews) - Customer Support (4 reviews) - Pentesting Efficiency (4 reviews) - Scheduling (4 reviews) **Cons:** - Difficult Customization (2 reviews) - Limited Features (2 reviews) - Slow Scanning (2 reviews) - Bugs (1 reviews) - Confusing Interface (1 reviews) ### What Do G2 Reviewers Say About Pentest-Tools.com? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of Pentest-Tools.com, allowing anyone to integrate it into their operations effortlessly. - Users value the **automation** of Pentest-Tools.com, streamlining vulnerability management with user-friendly, efficient tools and reporting. - Users praise the **quick and helpful customer support** of Pentest-Tools.com, enhancing their overall user experience. - Users commend the **efficiency of Pentesting** , noting its fast processing and comprehensive vulnerability reports. - Users appreciate the **efficient scheduling features** of Pentest-Tools.com, saving valuable time in their vulnerability management processes. **Cons:** - Users express frustration with **difficult customization** of reports, noting lack of editing options and templates limits flexibility. - Users express frustration over **limited report customization** and unexpected changes to asset management, impacting efficiency. - Users find that the **slow scanning** process can hinder efficiency, adding frustration to the testing experience. - Users find the **bugs in findings** require extra manual work, which can be annoying for developers. - Users find the **interface confusing** , making navigation between scans, assets, and reports less intuitive than desired. #### What Are Recent G2 Reviews of Pentest-Tools.com? **"[Cost-Effective, Accurate, and Fast—Easy Setup and Smooth Integrations](https://www.g2.com/survey_responses/pentest-tools-com-review-13059643)"** **Rating:** 5.0/5.0 stars *— Verified User in Insurance* [Read full review](https://www.g2.com/survey_responses/pentest-tools-com-review-13059643) --- **"[why i would recommend pen-test tools.com to small teams](https://www.g2.com/survey_responses/pentest-tools-com-review-11787083)"** **Rating:** 4.0/5.0 stars *— Omar B.* [Read full review](https://www.g2.com/survey_responses/pentest-tools-com-review-11787083) --- #### What Are G2 Users Discussing About Pentest-Tools.com? - [What is Pentest-Tools.com used for?](https://www.g2.com/discussions/what-is-pentest-tools-com-used-for) - [How do you perform a VAPT?](https://www.g2.com/discussions/how-do-you-perform-a-vapt) - 1 comment - [What are the security testing tools?](https://www.g2.com/discussions/what-are-the-security-testing-tools) - 1 comment - [What are VAPT tools?](https://www.g2.com/discussions/what-are-vapt-tools) - 1 comment - [What is Pentest tool?](https://www.g2.com/discussions/what-is-pentest-tool) - 1 comment ### 6. [Google Cloud Security Scanner](https://www.g2.com/products/google-cloud-security-scanner/reviews) Automatically scan your App Engine apps for common vulnerabilities **Average Rating:** 4.1/5.0 **Total Reviews:** 21 **How Do G2 Users Rate Google Cloud Security Scanner?** - **Has the product been a good partner in doing business?:** 7.5/10 (Category avg: 9.2/10) - **Detection Rate:** 7.4/10 (Category avg: 8.9/10) - **Automated Scans:** 8.3/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 7.4/10 (Category avg: 8.4/10) **Who Is the Company Behind Google Cloud Security Scanner?** - **Seller:** [Google](https://www.g2.com/sellers/google) - **Year Founded:** 1998 - **HQ Location:** Mountain View, CA - **Twitter:** @google (31,899,995 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/1441/ (341,888 employees on LinkedIn®) - **Ownership:** NASDAQ:GOOG **Who Uses This Product?** - **Top Industries:** Computer Software - **Company Size:** 41% Mid-Market, 36% Small-Business #### What Are Recent G2 Reviews of Google Cloud Security Scanner? **"[Secure your cloud with Google Cloud Security Scanner: Find, Fix, and Protect](https://www.g2.com/survey_responses/google-cloud-security-scanner-review-7833660)"** **Rating:** 4.5/5.0 stars *— Aditya G.* [Read full review](https://www.g2.com/survey_responses/google-cloud-security-scanner-review-7833660) --- **"["Great, easy to use software".](https://www.g2.com/survey_responses/google-cloud-security-scanner-review-7864377)"** **Rating:** 4.5/5.0 stars *— Shweta M.* [Read full review](https://www.g2.com/survey_responses/google-cloud-security-scanner-review-7864377) --- ### 7. [Gearset DevOps](https://www.g2.com/products/gearset-devops/reviews) Gearset is the global leader in Salesforce DevOps. It’s a DevOps platform that helps organizations manage, automate, and govern the full Salesforce development lifecycle, from planning and deployment to testing, data management, and compliance. The platform is designed for Salesforce teams that need reliable, scalable DevOps processes across complex org environments. Gearset is used by mid-market and enterprise organizations across regulated and non-regulated industries, including healthcare, financial services, insurance, and technology. Typical users include Salesforce administrators, developers, DevOps engineers, release managers, and platform owners responsible for maintaining deployment quality, security, and operational consistency. The platform supports a wide range of Salesforce use cases, including metadata and CPQ deployments, CI/CD automation, code review workflows, sandbox seeding, test automation, and monitoring. As well as deployment automation, Gearset includes tools for Salesforce data protection and long-term data management, such as automated backups, data restore, and archiving. Observability and Org Intelligence features provide insight into org health, deployment risk, and system changes over time. Gearset also includes governance and compliance capabilities designed for enterprise environments. These features help teams maintain audit readiness and enforce access controls while supporting compliance frameworks such as SOX, ISO, HIPAA, and GDPR. The platform is delivered as a managed service and integrates with Salesforce environments without requiring complex local infrastructure. Key features and capabilities include: - Salesforce metadata, CPQ, and data deployments with CI/CD automation and version control integration - Code review, test automation, and release validation to support quality and consistency - Automated Salesforce backups, restore, and data archiving for data protection and retention - Sandbox seeding, observability, and Org Intelligence to support environment management and visibility - Governance features including audit trails, role-based access controls, and compliance support Gearset is a Salesforce Partner and has supported Salesforce teams globally since 2015. The platform is used by organizations managing multiple orgs (across regions), frequent releases, and complex compliance requirements, helping teams reduce deployment risk, improve operational visibility, and maintain control over Salesforce change management processes. **Average Rating:** 4.7/5.0 **Total Reviews:** 291 **How Do G2 Users Rate Gearset DevOps?** - **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.2/10) - **Detection Rate:** 7.5/10 (Category avg: 8.9/10) - **Automated Scans:** 8.9/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 8.3/10 (Category avg: 8.4/10) **Who Is the Company Behind Gearset DevOps?** - **Seller:** [Gearset](https://www.g2.com/sellers/gearset) - **Company Website:** https://www.gearset.com - **Year Founded:** 2015 - **HQ Location:** Cambridge, Cambridgeshire - **Twitter:** @GearsetHQ (1,182 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/10478150/ (361 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Salesforce Developer, Salesforce Administrator - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 37% Mid-Market, 33% Small-Business #### What Are Gearset DevOps's Pros and Cons? **Pros:** - Ease of Use (25 reviews) - Deployment (21 reviews) - Easy Deployment (17 reviews) - Customer Support (16 reviews) - Deployment Ease (14 reviews) **Cons:** - Deployment Issues (6 reviews) - Expensive (5 reviews) - Complexity (4 reviews) - Data Management (4 reviews) - Missing Features (4 reviews) ### What Do G2 Reviewers Say About Gearset DevOps? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** of Gearset DevOps, finding setup smooth and operations intuitive for efficient deployments. - Users appreciate Gearset's **efficiency in automating deployments** , allowing for faster, error-free management of code and metadata. - Users appreciate the **easy deployment** process of Gearset DevOps, enabling efficient package validations and quick connections. - Users commend Gearset DevOps for its **exceptional customer support** , highlighting responsiveness and helpful interactions with the team. - Users commend the **ease of deployment** with Gearset DevOps, highlighting smooth setup and reduced delivery times. **Cons:** - Users face **deployment issues** as Flows do not activate automatically, requiring manual intervention and caution in production changes. - Users find Gearset DevOps to be **expensive** , especially for larger teams, impacting affordability and accessibility. - Users find the **complexity in dependency management** burdensome, seeking more automation and simplified processes in Gearset DevOps. - Users find the **limitations in metadata transfer** frustrating, especially regarding object settings and ease of navigation. - Users find **missing features** like automated dependency tracking and mobile compatibility frustrating in Gearset DevOps. #### What Are Recent G2 Reviews of Gearset DevOps? **"[Powerful Salesforce DevOps That Makes Every Release Easier](https://www.g2.com/survey_responses/gearset-devops-review-13031923)"** **Rating:** 5.0/5.0 stars *— Paul B.* [Read full review](https://www.g2.com/survey_responses/gearset-devops-review-13031923) --- **"[Straightforward Deployments, Powerful Metadata Tools, and Outstanding Support](https://www.g2.com/survey_responses/gearset-devops-review-12770401)"** **Rating:** 5.0/5.0 stars *— Jacklyn J.* [Read full review](https://www.g2.com/survey_responses/gearset-devops-review-12770401) --- ### 8. [Feroot Security](https://www.g2.com/products/feroot-security/reviews) The Feroot AI Platform brings intelligent automation to ensure compliant and secure user experiences across web and mobile applications—eliminating manual processes, reducing human error, and replacing operational overhead with continuous, real-time protection. Instead of spending months manually auditing websites and mobile applications, organizations can achieve security and compliance in as little as 45 seconds. Feroot automates website security and compliance programs to help meet the requirements of PCI DSS 4.0.1, HIPAA (including Rules on the Use of Online Tracking Technologies), CCPA / CPRA, GDPR, CIPA, and more than 50 global laws and industry standards. At the core of the platform are Feroot AI Agents that continuously monitor, detect, and enforce compliance across client-side environments. They identify and stop hidden threats such as Magecart attacks, formjacking, unauthorized tracking, data leakage, and malicious third-party scripts before they can compromise sensitive data. Feroot is purpose-built to protect high-value web assets including payment pages, login forms, healthcare portals, and other sensitive workflows where customer and patient data is most at risk. The unified platform integrates critical web security and compliance capabilities into a single solution, including: • JavaScript behavior analysis • Web compliance scanning • Third-party script monitoring • Consent audit and policy enforcement • Data privacy posture management By combining security monitoring with automated compliance enforcement, Feroot provides complete visibility and control over client-side risk without adding complexity. From Fortune 500 enterprises to healthcare providers, retailers, SaaS platforms, universities, utilities, municipalities, travel companies, gaming platforms, and payment service providers, organizations of all sizes trust Feroot to safeguard sensitive customer data and maintain regulatory compliance in an increasingly complex digital landscape. Feroot AI solutions include: • PaymentGuard AI – Protects payment workflows and PCI-scoped environments • HealthData Shield AI – Secures patient data and healthcare portals • AlphaPrivacy AI – Ensures data privacy compliance and user consent enforcement • CodeGuard AI – Monitors and protects client-side code integrity and behavior Visit https://www.feroot.com for more information. **Average Rating:** 4.9/5.0 **Total Reviews:** 28 **How Do G2 Users Rate Feroot Security?** - **Has the product been a good partner in doing business?:** 9.8/10 (Category avg: 9.2/10) - **Detection Rate:** 9.2/10 (Category avg: 8.9/10) - **Automated Scans:** 9.4/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 8.9/10 (Category avg: 8.4/10) **Who Is the Company Behind Feroot Security?** - **Seller:** [Feroot Security](https://www.g2.com/sellers/feroot-security) - **Company Website:** https://www.feroot.com - **Year Founded:** 2017 - **HQ Location:** Toronto, Ontario, Canada - **LinkedIn® Page:** http://www.linkedin.com/company/feroot (51 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 50% Enterprise, 29% Mid-Market #### What Are Feroot Security's Pros and Cons? **Pros:** - Customer Support (14 reviews) - Ease of Use (9 reviews) - Security (9 reviews) - Helpful (7 reviews) - Easy Integrations (6 reviews) **Cons:** - Poor Interface Design (4 reviews) - Complexity (3 reviews) - Not Intuitive (3 reviews) - Complex Setup (2 reviews) - Difficult Setup (2 reviews) ### What Do G2 Reviewers Say About Feroot Security? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **attentive and responsive customer support** from Feroot, enhancing their overall security experience. - Users value the **ease of use** of Feroot Security, appreciating its seamless integration and supportive onboarding experience. - Users commend Feroot's **robust security framework** , enhancing compliance and efficiently addressing vulnerabilities with excellent support. - Users commend Feroot for its **exceptional support** and quick responses, enhancing overall satisfaction and security effectiveness. - Users value the **easy integrations** with existing infrastructure, appreciating the seamless setup and efficient support provided. **Cons:** - Users find the **interface design lacking** , making initial setup and navigation more challenging than necessary. - Users find a steep **learning curve** with Feroot Security, especially in navigating configurations and the user interface. - Users find the **non-intuitive structure** challenging initially, requiring time to navigate and learn the platform effectively. - Users find the **complex setup** process challenging, requiring time to navigate and understand the platform effectively. - Users find the **difficult setup** process for policies in Feroot Security to be inefficient and not user-friendly. #### What Are Recent G2 Reviews of Feroot Security? **"[Effective tooling for PCI DSS compliance, great team](https://www.g2.com/survey_responses/feroot-security-review-12764308)"** **Rating:** 5.0/5.0 stars *— Daniel F.* [Read full review](https://www.g2.com/survey_responses/feroot-security-review-12764308) --- **"[Robust Client-Side Security with Exceptional Support](https://www.g2.com/survey_responses/feroot-security-review-12512024)"** **Rating:** 5.0/5.0 stars *— Hama M.* [Read full review](https://www.g2.com/survey_responses/feroot-security-review-12512024) --- ### 9. [Jit](https://www.g2.com/products/jit/reviews) Jit is redefining application security by introducing the first Agentic AppSec Platform, seamlessly blending human expertise with AI-driven automation. Designed for modern development teams, Jit empowers organizations to proactively manage security risks across the entire software development lifecycle.​ AI-Powered Agents Jit's AI Agents, such as SERA (Security Evaluation and Remediation Agent) and COTA (Communication, Ops, and Ticketing Agent), collaborate with your teams to automate vulnerability triage, risk assessment, and remediation processes, significantly reducing manual workloads. ​ Comprehensive Security Scanning Achieve full-stack security coverage with integrated scanners for SAST, DAST, SCA, IaC, CSPM, and more. Jit's platform ensures continuous monitoring and immediate feedback on code changes, facilitating rapid identification and resolution of security issues. ​ Developer-Centric Experience With integrations into popular IDEs and CI/CD pipelines, Jit provides developers with contextual security insights directly within their workflows, promoting a shift-left approach without disrupting productivity. ​ Agentic AI for AppSec Teams Risk-Based Prioritization Utilizing the Model Context Protocol (MCP), Jit evaluates vulnerabilities in the context of runtime environments, business impact, and compliance requirements, enabling teams to focus on the most critical risks. ​ Seamless Integrations Jit integrates with a wide array of tools, including GitHub, GitLab, AWS, Azure, GCP, Jira, Slack, and more, ensuring that security processes are embedded within your existing technology stack. ​ **Average Rating:** 4.5/5.0 **Total Reviews:** 43 **How Do G2 Users Rate Jit?** - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10) - **Detection Rate:** 8.4/10 (Category avg: 8.9/10) - **Automated Scans:** 8.6/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 8.4/10 (Category avg: 8.4/10) **Who Is the Company Behind Jit?** - **Seller:** [jit](https://www.g2.com/sellers/jit) - **Year Founded:** 2021 - **HQ Location:** Boston, MA - **Twitter:** @jit_io (522 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/jit/ (150 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer Software, Financial Services - **Company Size:** 44% Mid-Market, 42% Small-Business #### What Are Jit's Pros and Cons? **Pros:** - Security (10 reviews) - Ease of Use (7 reviews) - Easy Integrations (7 reviews) - Efficiency (7 reviews) - Automation (6 reviews) **Cons:** - Integration Issues (4 reviews) - Limited Features (4 reviews) - Limited Integration (4 reviews) - Poor Documentation (4 reviews) - Complexity (3 reviews) ### What Do G2 Reviewers Say About Jit? *AI-generated summary from verified user reviews* **Pros:** - Users value the **seamless integration of security** in Jit, enhancing efficiency and consistency in their workflows. - Users praise the **ease of use** of Jit, noting its lightweight setup and seamless integration into development workflows. - Users value the **easy integrations** of Jit, streamlining security within existing workflows effortlessly. - Users value the **efficiency** of Jit, which reduces waste and streamlines processes for better productivity. - Users value the **automation of security controls** , streamlining workflows and enhancing consistency without overwhelming teams. **Cons:** - Users face **integration issues** with Jit, as coverage for all enterprise environments and tools is limited. - Users note the **limited features** in Jit, wishing for more customization and in-depth analytics options. - Users note **limited integration** options with Jit, wishing for broader support across various enterprise environments. - Users find the **documentation lacking** , especially for advanced configurations, complicating the setup process and understanding. - Users find the **configuration complexity** daunting, particularly for newcomers and when integrating with other services. #### What Are Recent G2 Reviews of Jit? **"[Exploring jit a personal review](https://www.g2.com/survey_responses/jit-review-11751139)"** **Rating:** 4.0/5.0 stars *— Mohamed A.* [Read full review](https://www.g2.com/survey_responses/jit-review-11751139) --- **"[Helpful Tool for Integrating Security in Mobile App Development](https://www.g2.com/survey_responses/jit-review-11750234)"** **Rating:** 4.0/5.0 stars *— Ali A.* [Read full review](https://www.g2.com/survey_responses/jit-review-11750234) --- ### 10. [Fortra VM](https://www.g2.com/products/fortra-vm/reviews) Fortra VM is a proactive, risk-based vulnerability management solution that helps organizations identify, assess, and prioritize security weaknesses across their infrastructure. Beyond basic scanning, Fortra VM provides contextual risk prioritization through its Security GPA rating system, Peer Insight for industry benchmarking, and threat ranking to identify exploitation vectors that are used in real world attacks. Conveniently delivered via SAAS, Fortra VM creates easily understood reporting for efficient and effective remediation. **Average Rating:** 4.3/5.0 **Total Reviews:** 67 **How Do G2 Users Rate Fortra VM?** - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.2/10) - **Detection Rate:** 8.5/10 (Category avg: 8.9/10) - **Automated Scans:** 9.2/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 8.2/10 (Category avg: 8.4/10) **Who Is the Company Behind Fortra VM?** - **Seller:** [Fortra](https://www.g2.com/sellers/fortra) - **Year Founded:** 1982 - **HQ Location:** Eden Prairie, Minnesota - **Twitter:** @fortraofficial (2,773 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/fortra (1,755 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Financial Services, Banking - **Company Size:** 45% Mid-Market, 35% Small-Business #### What Are Fortra VM's Pros and Cons? **Pros:** - Customer Support (1 reviews) - Data Security (1 reviews) - Ease of Use (1 reviews) - Incident Management (1 reviews) - Insights (1 reviews) ### What Do G2 Reviewers Say About Fortra VM? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **exceptional customer support** of Fortra VM, enhancing their experience since 2020. - Users value the **data security** of Fortra VM, finding it effective for assessing vulnerabilities and risk management. - Users find Fortra VM incredibly **easy to use** , appreciating its lightweight nature and excellent customer support. - Users highlight the **effective incident management** of Fortra VM, aiding in targeted remediation of vulnerabilities. - Users value the **accurate security vulnerability scans** of Fortra VM, enhancing their ability to assess and remediate risks. #### What Are Recent G2 Reviews of Fortra VM? **"[the vm has great features](https://www.g2.com/survey_responses/fortra-vm-review-10361310)"** **Rating:** 5.0/5.0 stars *— suraj t.* [Read full review](https://www.g2.com/survey_responses/fortra-vm-review-10361310) --- **"[Solid platform and service](https://www.g2.com/survey_responses/fortra-vm-review-10727027)"** **Rating:** 5.0/5.0 stars *— Verified User in Judiciary* [Read full review](https://www.g2.com/survey_responses/fortra-vm-review-10727027) --- #### What Are G2 Users Discussing About Fortra VM? - [What is beSECURE used for?](https://www.g2.com/discussions/what-is-besecure-used-for) - [What does digital defense do?](https://www.g2.com/discussions/what-does-digital-defense-do) - [What tools are used for application vulnerability management?](https://www.g2.com/discussions/frontline-vulnerability-manager-what-tools-are-used-for-application-vulnerability-management) - [What are the typical features offered by vulnerability scanner?](https://www.g2.com/discussions/frontline-vulnerability-manager-what-are-the-typical-features-offered-by-vulnerability-scanner) - [What does vulnerability management software do?](https://www.g2.com/discussions/what-does-vulnerability-management-software-do) ### 11. [Semgrep](https://www.g2.com/products/semgrep/reviews) Semgrep is a modern static analysis (SAST), software composition analysis (SCA), and secrets detection platform designed for both developers and security teams. It combines fast, deterministic analysis with context-aware AI that triages findings like a senior security engineer. The AI Assistant helps reduce false positives, prioritize meaningful results, and offers clear remediation guidance. Its “Memories” feature learns from past decisions to further reduce triage noise over time. Semgrep also supports deep analysis of transitive dependencies, not just direct ones, helping teams surface and address hidden risks in their supply chain. It integrates well into modern development workflows and is easy to customize across environments. **Average Rating:** 4.6/5.0 **Total Reviews:** 55 **How Do G2 Users Rate Semgrep?** - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10) - **Detection Rate:** 8.0/10 (Category avg: 8.9/10) - **Automated Scans:** 9.0/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 8.0/10 (Category avg: 8.4/10) **Who Is the Company Behind Semgrep?** - **Seller:** [Semgrep](https://www.g2.com/sellers/semgrep) - **Company Website:** https://semgrep.dev - **Year Founded:** 2017 - **HQ Location:** San Francisco, US - **Twitter:** @semgrep (4,433 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/returntocorp (262 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 45% Enterprise, 42% Mid-Market #### What Are Semgrep's Pros and Cons? **Pros:** - Ease of Use (16 reviews) - Features (14 reviews) - Vulnerability Detection (13 reviews) - Scanning Efficiency (12 reviews) - Security (12 reviews) **Cons:** - Not User-Friendly (7 reviews) - Limited Features (6 reviews) - Difficult Learning (5 reviews) - Lack of Guidance (5 reviews) - Learning Curve (5 reviews) ### What Do G2 Reviewers Say About Semgrep? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of Semgrep, enabling effortless integration and rule customization for developers. - Users appreciate the **intuitive rule customization** and fast scanning of Semgrep, enhancing their development workflow effectively. - Users appreciate the **effective vulnerability detection** of Semgrep, highlighted by its low false positive rates and rapid scanning. - Users highlight the **scanning efficiency** of Semgrep, enabling quick and effective code analysis without disrupting development workflows. - Users appreciate the **effective security vulnerability detection** capabilities of Semgrep, enabling quick fixes and enhanced code quality. **Cons:** - Users find Semgrep **not user-friendly** due to its steep learning curve and complex rule syntax. - Users find Semgrep's **limited features** restrict its usability, lacking segmentation and advanced filtering options for effective management. - Users find the **difficult learning curve** for custom rule syntax challenging, particularly for newcomers to static analysis. - Users experience a **lack of guidance** when creating custom rules, making the learning curve quite steep. - Users find the **learning curve steep** for Semgrep, especially for advanced rule writing and initial setup challenges. #### What Are Recent G2 Reviews of Semgrep? **"[Streamlined Code Security with Semgrep](https://www.g2.com/survey_responses/semgrep-review-11971635)"** **Rating:** 5.0/5.0 stars *— Shreekanth k.* [Read full review](https://www.g2.com/survey_responses/semgrep-review-11971635) --- **"[Powerful Rule Engine and Autofix, but Governance at Scale Needs Work](https://www.g2.com/survey_responses/semgrep-review-11893445)"** **Rating:** 4.5/5.0 stars *— Verified User in Information Technology and Services* [Read full review](https://www.g2.com/survey_responses/semgrep-review-11893445) --- ### 12. [Microsoft Defender Vulnerability Management](https://www.g2.com/products/microsoft-defender-vulnerability-management/reviews) Defender Vulnerability Management delivers asset visibility, intelligent assessments, and built-in remediation tools for Windows, macOS, Linux, Android, iOS, and network devices. Leveraging Microsoft threat intelligence, breach likelihood predictions, business contexts, and devices assessments, Defender Vulnerability Management rapidly and continuously prioritizes the biggest vulnerabilities on your most critical assets and provides security recommendations to mitigate risk. Reduce risk with continuous vulnerability assessment, risk-based prioritization, and remediation. Defender Vulnerability Management is available for cloud workloads and endpoints. Defender for Endpoint Plan 2 customers can access advanced vulnerability management capabilities with the Defender Vulnerability Management add-on, now generally available. **Average Rating:** 4.4/5.0 **Total Reviews:** 34 **How Do G2 Users Rate Microsoft Defender Vulnerability Management?** - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.2/10) - **Detection Rate:** 8.3/10 (Category avg: 8.9/10) - **Automated Scans:** 7.2/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 7.2/10 (Category avg: 8.4/10) **Who Is the Company Behind Microsoft Defender Vulnerability Management?** - **Seller:** [Microsoft](https://www.g2.com/sellers/microsoft) - **Year Founded:** 1975 - **HQ Location:** Redmond, Washington - **Twitter:** @microsoft (13,091,739 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/microsoft/ (231,632 employees on LinkedIn®) - **Ownership:** MSFT **Who Uses This Product?** - **Top Industries:** Computer & Network Security - **Company Size:** 41% Small-Business, 35% Enterprise #### What Are Recent G2 Reviews of Microsoft Defender Vulnerability Management? **"[Amazing vulnerability management solution](https://www.g2.com/survey_responses/microsoft-defender-vulnerability-management-review-9057478)"** **Rating:** 5.0/5.0 stars *— Marko V.* [Read full review](https://www.g2.com/survey_responses/microsoft-defender-vulnerability-management-review-9057478) --- **"[Probably the best choice to defend your PC (Windows 10 and 11)](https://www.g2.com/survey_responses/microsoft-defender-vulnerability-management-review-8596658)"** **Rating:** 4.0/5.0 stars *— Markus M.* [Read full review](https://www.g2.com/survey_responses/microsoft-defender-vulnerability-management-review-8596658) --- ### 13. [VulScan](https://www.g2.com/products/vulscan/reviews) Automated Vulnerability Scanning. Affordably Priced For Everyone! With almost 70 new hidden vulnerabilities identified every day, you would need to be a super hero with X-ray vision to find them all. Or, you can let VulScan do it for you. VulScan is purpose-built for MSPs and for IT Departments that handle their own IT security. It has all the features you need for both internal and external vulnerability management, but without all the complexity found in older solutions. Best of all, VulScan is priced so that cost is no longer a barrier to scanning as many assets as you need, as frequently as you want. That’s why our slogan is “Vulnerability Management For The Rest of Us! VulScan is an affordable cloud-based vulnerability management platform. It includes the software needed to spin up an unlimited number of virtual network scanner appliances using Hyper-V or VMWare, and a cloud-based portal to control the scanners and manage the discovered issues. For internal network scanning, the appliances can be installed on any existing computer that has excess capacity on the network, or installed on a dedicated box to be permanently installed. You can add multiple scanners and configure them each to scan separate parts of the network to get even faster results pushed into the same client site dashboard at no additional cost. For external scanning, the appliances are installed on the MSP’s data center or other remote location and “pointed” to the public facing IP addresses of the target network. **Average Rating:** 4.1/5.0 **Total Reviews:** 121 **How Do G2 Users Rate VulScan?** - **Has the product been a good partner in doing business?:** 8.2/10 (Category avg: 9.2/10) - **Detection Rate:** 7.8/10 (Category avg: 8.9/10) - **Automated Scans:** 8.6/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 6.9/10 (Category avg: 8.4/10) **Who Is the Company Behind VulScan?** - **Seller:** [Kaseya](https://www.g2.com/sellers/kaseya) - **Company Website:** https://www.kaseya.com/ - **Year Founded:** 2000 - **HQ Location:** Miami, FL - **Twitter:** @KaseyaCorp (17,411 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/kaseya/ (5,471 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 66% Small-Business, 32% Mid-Market #### What Are VulScan's Pros and Cons? **Pros:** - Ease of Use (24 reviews) - Implementation Ease (10 reviews) - Simple (10 reviews) - Features (9 reviews) - Reporting Features (9 reviews) **Cons:** - Difficult Setup (6 reviews) - Inadequate Reporting (5 reviews) - Poor Customer Support (5 reviews) - Confusing Interface (4 reviews) - Limited Features (4 reviews) ### What Do G2 Reviewers Say About VulScan? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** of VulScan, enjoying its straightforward deployment and automated scanning features. - Users praise the **intuitive interface and automated vulnerability scanning** of VulScan, making implementation and reporting effortless. - Users appreciate the **easy report generation** in VulScan, enjoying straightforward scheduling and integration with existing solutions. - Users value the **seamless integrations** of VulScan, enhancing efficiency in documentation and vulnerability management. - Users appreciate the **ease of reporting** with VulScan, benefiting from automated scans and consolidated reports. **Cons:** - Users find the **difficult setup** of VulScan frustrating, requiring extensive documentation and troubleshooting for initial deployment. - Users find **inadequate reporting** in VulScan, lacking detailed insights and customization for effective vulnerability management. - Users highlight **poor customer support** from Kaseya, causing billing issues and unfulfilled promises regarding product features. - Users are frustrated by the **limited reporting** features of VulScan, hindering their ability to track vulnerabilities effectively. - Users face **setup difficulties** with VulScan, finding implementation across networks complicated and requiring specific configurations. #### What Are Recent G2 Reviews of VulScan? **"[Clear, Easy Security Visibility That Cuts Manual Busywork](https://www.g2.com/survey_responses/vulscan-review-12884652)"** **Rating:** 5.0/5.0 stars *— Sheila K.* [Read full review](https://www.g2.com/survey_responses/vulscan-review-12884652) --- **"[Great addonfor NMAP](https://www.g2.com/survey_responses/vulscan-review-8143727)"** **Rating:** 4.5/5.0 stars *— Viswajith R.* [Read full review](https://www.g2.com/survey_responses/vulscan-review-8143727) --- ### 14. [Tenable Cloud Security](https://www.g2.com/products/tenable-tenable-cloud-security/reviews) Tenable Cloud Security is an actionable cloud security platform that exposes and closes priority security gaps caused by misconfigurations, risky entitlements and vulnerabilities. Organizations use its intuitive UI to unify siloed tools to secure the full cloud stack, achieving end-to-end visibility, prioritization and remediation across infrastructure, workloads, identities, data and AI services. Users can access the extensive knowledgebase of Tenable Research, reducing the risk of breaches with advanced prioritization that understands resource, identity and risk relationships. Tenable uses this context to pinpoint toxic combinations of risk most likely to be exploited. Take action, even if you only have 5 minutes, with guided remediations and code snippets that significantly reduce MTTR. With one click, report on compliance with industry benchmarks and regulatory requirements, e.g. SOC 2, GDPR & HIPAA. TCS is part of Tenable’s AI-powered exposure management platform, Tenable One. **Average Rating:** 4.6/5.0 **Total Reviews:** 37 **How Do G2 Users Rate Tenable Cloud Security?** - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10) - **Detection Rate:** 9.2/10 (Category avg: 8.9/10) - **Automated Scans:** 7.5/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 7.5/10 (Category avg: 8.4/10) **Who Is the Company Behind Tenable Cloud Security?** - **Seller:** [Tenable](https://www.g2.com/sellers/tenable) - **Company Website:** https://www.tenable.com/ - **HQ Location:** Columbia, MD - **Twitter:** @TenableSecurity (87,752 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/25452/ (2,350 employees on LinkedIn®) - **Ownership:** NASDAQ: TENB **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 57% Mid-Market, 38% Enterprise #### What Are Tenable Cloud Security's Pros and Cons? **Pros:** - Compliance (6 reviews) - Detailed Analysis (5 reviews) - Integrations (5 reviews) - Visibility (5 reviews) - Vulnerability Detection (5 reviews) **Cons:** - Complex Setup (4 reviews) - Expensive (4 reviews) - Difficult Setup (3 reviews) - Implementation Difficulty (3 reviews) - Inadequate Reporting (3 reviews) ### What Do G2 Reviewers Say About Tenable Cloud Security? *AI-generated summary from verified user reviews* **Pros:** - Users value the **comprehensive visibility** of Tenable Cloud Security, enhancing compliance through effective monitoring and risk assessment. - Users value the **comprehensive visibility** Tenable Cloud Security provides for identifying vulnerabilities and compliance risks effectively. - Users value the **seamless integration** of Tenable Cloud Security with existing tools, enhancing their security management experience. - Users value the **unified visibility** Tenable Cloud Security offers across multiple cloud platforms, enhancing risk management and compliance. - Users value the **continuous vulnerability detection** in Tenable Cloud Security, enhancing proactive risk management effectively. **Cons:** - Users find the **complex setup** of Tenable Cloud Security time-consuming and requiring substantial technical expertise. - Users express concerns about the **high pricing** of Tenable Cloud Security, particularly affecting smaller organizations and startups. - Users find the **difficult setup** of Tenable Cloud Security time-consuming and challenging, especially for less experienced teams. - Users find the **implementation difficult** , often requiring technical expertise and time to set up and configure effectively. - Users find the **reporting limitations** of Tenable Cloud Security frustrating, as they seek more practical insights. #### What Are Recent G2 Reviews of Tenable Cloud Security? **"[Comprehensive Security Visibility with Tenable Cloud Security](https://www.g2.com/survey_responses/tenable-cloud-security-review-11791666)"** **Rating:** 4.0/5.0 stars *— Prathamesh K.* [Read full review](https://www.g2.com/survey_responses/tenable-cloud-security-review-11791666) --- **"[Tenable cloud security : Powerful visibility with room to improve on usability and scale.](https://www.g2.com/survey_responses/tenable-cloud-security-review-11823999)"** **Rating:** 4.5/5.0 stars *— Ajay S.* [Read full review](https://www.g2.com/survey_responses/tenable-cloud-security-review-11823999) --- #### What Are G2 Users Discussing About Tenable Cloud Security? - [What is Ermetic used for?](https://www.g2.com/discussions/what-is-ermetic-used-for) - 1 comment ### 15. [Qualys VMDR](https://www.g2.com/products/qualys-vmdr/reviews) Qualys VMDR is an all-in-one risk-based vulnerability management solution that quantifies cyber risk. It gives organizations unprecedented insights into their risk posture and provides actionable steps to reduce risk. It also gives cybersecurity and IT teams a shared platform to collaborate, and the power to quickly align and automate no-code workflows to respond to threats with automated remediation and integrations with ITSM solutions such as ServiceNow. **Average Rating:** 4.4/5.0 **Total Reviews:** 164 **How Do G2 Users Rate Qualys VMDR?** - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.2/10) - **Detection Rate:** 8.5/10 (Category avg: 8.9/10) - **Automated Scans:** 8.6/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 8.4/10 (Category avg: 8.4/10) **Who Is the Company Behind Qualys VMDR?** - **Seller:** [Qualys](https://www.g2.com/sellers/qualys) - **Year Founded:** 1999 - **HQ Location:** Foster City, CA - **Twitter:** @qualys (34,248 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/8561/ (3,627 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Security Engineer - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 51% Enterprise, 28% Mid-Market #### What Are Qualys VMDR's Pros and Cons? **Pros:** - Vulnerability Detection (2 reviews) - Vulnerability Identification (2 reviews) - Alerting System (1 reviews) - Automation (1 reviews) - Cloud Integration (1 reviews) **Cons:** - Complexity (1 reviews) - Complex Reporting (1 reviews) - Complex Setup (1 reviews) - Difficult Learning (1 reviews) - Feature Complexity (1 reviews) ### What Do G2 Reviewers Say About Qualys VMDR? *AI-generated summary from verified user reviews* **Pros:** - Users value the **efficient vulnerability detection** of Qualys VMDR, enhancing security and simplifying asset monitoring. - Users appreciate the **swift vulnerability identification** of Qualys VMDR, enhancing their security posture and response capabilities. - Users value the **real-time alerting system** of Qualys VMDR for swiftly addressing critical vulnerabilities and enhancing security. - Users value the **seamless automation** of Qualys VMDR, appreciating the ease of deployment and comprehensive vulnerability management. - Users value the **cloud integration** of Qualys VMDR, appreciating its easy deployment and comprehensive vulnerability solutions. **Cons:** - Users find the **interface complexity** challenging initially, making it hard for newcomers to grasp effectively. - Users find the **complex reporting** feature challenging to understand, particularly for new users during initial use. - Users find the **complex setup** challenging, especially during the initial stages and for newcomers to the system. - Users find the **difficult learning** curve challenging, especially for newcomers trying to navigate the interface. - Users find the **interface complex** , making it challenging for new users to navigate and understand initially. #### What Are Recent G2 Reviews of Qualys VMDR? **"[One Go Tool for small or medium level Organizations](https://www.g2.com/survey_responses/qualys-vmdr-review-5466550)"** **Rating:** 4.0/5.0 stars *— Verified User in Security and Investigations* [Read full review](https://www.g2.com/survey_responses/qualys-vmdr-review-5466550) --- **"[Real-Time Asset Visibility and TruRisk Prioritization at Scale](https://www.g2.com/survey_responses/qualys-vmdr-review-12484147)"** **Rating:** 5.0/5.0 stars *— Verified User in Information Technology and Services* [Read full review](https://www.g2.com/survey_responses/qualys-vmdr-review-12484147) --- #### What Are G2 Users Discussing About Qualys VMDR? - [What does Qualys Vmdr do?](https://www.g2.com/discussions/what-does-qualys-vmdr-do) - 1 comment - [What vulnerabilities does Qualys scan for?](https://www.g2.com/discussions/qualys-vmdr-what-vulnerabilities-does-qualys-scan-for) - [What does Qualys cloud agent do?](https://www.g2.com/discussions/what-does-qualys-cloud-agent-do) - [How does Qualys patch management work?](https://www.g2.com/discussions/how-does-qualys-patch-management-work) - [What is Qualys software?](https://www.g2.com/discussions/what-is-qualys-software) ### 16. [Beagle Security](https://www.g2.com/products/beagle-security/reviews) Beagle Security helps you identify vulnerabilities in your web applications, APIs, GraphQL and remediate them with actionable insights before hackers harm you in any manner. With Beagle Security, you can integrate automated penetration testing into your CI/CD pipeline to identify security issues earlier in your development lifecycle and ship safer web applications. Major features: - Checks your web apps & APIs for 3000+ test cases to find security loopholes - OWASP & SANS standards - Recommendations to address security issues - Security test complex web apps with login - Compliance reports (GDPR, HIPAA & PCI DSS) - Test scheduling - DevSecOps integrations - API integration - Team access - Integrations with popular tools like Slack, Jira, Asana, Trello & 100+ other tools **Average Rating:** 4.7/5.0 **Total Reviews:** 85 **How Do G2 Users Rate Beagle Security?** - **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.2/10) - **Detection Rate:** 9.2/10 (Category avg: 8.9/10) - **Automated Scans:** 9.5/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 8.3/10 (Category avg: 8.4/10) **Who Is the Company Behind Beagle Security?** - **Seller:** [Beagle Security](https://www.g2.com/sellers/beagle-security) - **Year Founded:** 2020 - **HQ Location:** San Francisco, US - **Twitter:** @beaglesecure (206 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/beaglesecurity/ (50 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Director, CEO - **Top Industries:** Marketing and Advertising, Information Technology and Services - **Company Size:** 91% Small-Business, 7% Mid-Market #### What Are Beagle Security's Pros and Cons? **Pros:** - Reporting Quality (1 reviews) - Setup Ease (1 reviews) ### What Do G2 Reviewers Say About Beagle Security? *AI-generated summary from verified user reviews* **Pros:** - Users praise the **attractive reporting** of Beagle Security, finding it easy to configure and comprehensive. - Users find the **setup ease** of Beagle Security highly beneficial, appreciating its intuitive configuration and reporting features. #### What Are Recent G2 Reviews of Beagle Security? **"[Comprehensive Security Testing with Actionable Insights](https://www.g2.com/survey_responses/beagle-security-review-12619693)"** **Rating:** 5.0/5.0 stars *— Nkosinathi T.* [Read full review](https://www.g2.com/survey_responses/beagle-security-review-12619693) --- **"[Very thorough service that gives us good Ci/CD assurance between Pen Tests](https://www.g2.com/survey_responses/beagle-security-review-11354043)"** **Rating:** 5.0/5.0 stars *— Matt B.* [Read full review](https://www.g2.com/survey_responses/beagle-security-review-11354043) --- #### What Are G2 Users Discussing About Beagle Security? - [How has Beagle Security enhanced your web security, and what features would you like to see added?](https://www.g2.com/discussions/how-has-beagle-security-enhanced-your-web-security-and-what-features-would-you-like-to-see-added) - [What is Beagle Security used for?](https://www.g2.com/discussions/what-is-beagle-security-used-for) - 1 comment ### 17. [Harness Platform](https://www.g2.com/products/harness-platform/reviews) Simplify your developer experience with the world's first AI-augmented software delivery platform. Upgrade your software delivery with Harness' innovative CI/CD, Feature Flags, Infrastructure as Code Management, and Chaos Engineering tools. We are a software delivery platform that helps developers and infrastructure engineers build and ship code for cloud and on-premise projects. We automate the continuous integration and continuous delivery (CI/CD) process to help teams build faster, ship more frequently, and improve quality, efficiency, and governance. We help companies in four key areas: Number one, we accelerate innovation through DevOps modernization. We provide an approach for software delivery that automates processes, reduces manual interventions, consolidates tools, and accelerates time-to-market for new products, features, and fixes. Number two, we improve developer experience. We give you the ability to attract, retain, and onboard high-caliber engineering talent while fostering a culture of continuous innovation and improvement. Number three, we secure software delivery. We give you the ability to integrate security into every phase of the SDLC. And last but not least is, we optimize cloud costs. We give you the ability to eliminate waste and to ensure that appropriate cloud resources are allocated at the right place at the right time. **Average Rating:** 4.6/5.0 **Total Reviews:** 300 **How Do G2 Users Rate Harness Platform?** - **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.2/10) - **Detection Rate:** 7.9/10 (Category avg: 8.9/10) - **Automated Scans:** 8.3/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 7.1/10 (Category avg: 8.4/10) **Who Is the Company Behind Harness Platform?** - **Seller:** [Harness](https://www.g2.com/sellers/harness-25016f40-e80f-4417-bea8-39412055d17a) - **Company Website:** https://harness.io/ - **Year Founded:** 2018 - **HQ Location:** San Francisco - **Twitter:** @HarnessWealth (1,389 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/harnessinc/ (1,701 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Software Engineer, DevOps Engineer - **Top Industries:** Computer Software, Financial Services - **Company Size:** 43% Enterprise, 38% Mid-Market #### What Are Harness Platform's Pros and Cons? **Pros:** - Ease of Use (114 reviews) - Features (73 reviews) - Feature Flags (49 reviews) - Easy Setup (40 reviews) - Easy Integrations (31 reviews) **Cons:** - Missing Features (23 reviews) - Limitations (20 reviews) - Limited Features (20 reviews) - Learning Curve (17 reviews) - Poor UI (16 reviews) ### What Do G2 Reviewers Say About Harness Platform? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of Harness Platform, finding it simple to implement and configure for projects. - Users value the **ease of use and extensive targeting options** offered by the Harness Platform for projects. - Users praise the **user-friendly interface** of Harness Platform, simplifying feature flag management for all team members. - Users highlight the **easy setup** process of Harness Platform, leading to quick implementation and significant cost savings. - Users appreciate the **easy integrations** with SSO, simplifying access and enhancing the overall user experience. **Cons:** - Users note a **lack of multiple filtering options** and features that could enhance flexibility and ease of use. - Users face **limitations in configuration management** on Harness Platform, leading to workarounds and confusion in processes. - Users are frustrated by the **limited features** of Harness Platform, impacting flexibility and ease of use. - Users find that the **steep learning curve** of the Harness Platform can be overwhelming, especially for beginners. - Users find the **poor UI** of Harness Platform complex and challenging, impacting overall user experience. #### What Are Recent G2 Reviews of Harness Platform? **"[Harness - World of automation](https://www.g2.com/survey_responses/harness-platform-review-11792426)"** **Rating:** 4.5/5.0 stars *— Sunil A.* [Read full review](https://www.g2.com/survey_responses/harness-platform-review-11792426) --- **"[Best tool for cost optimization and Repository](https://www.g2.com/survey_responses/harness-platform-review-11543262)"** **Rating:** 5.0/5.0 stars *— Satendra V.* [Read full review](https://www.g2.com/survey_responses/harness-platform-review-11543262) --- #### What Are G2 Users Discussing About Harness Platform? - [What is Harness Continuous Delivery used for?](https://www.g2.com/discussions/what-is-harness-continuous-delivery-used-for) - 1 comment - [What is Propelo used for?](https://www.g2.com/discussions/what-is-propelo-used-for) - [What is Harness Cloud Cost Management used for?](https://www.g2.com/discussions/what-is-harness-cloud-cost-management-used-for) - [What is the difference between harness and Jenkins?](https://www.g2.com/discussions/what-is-the-difference-between-harness-and-jenkins) - 1 comment - [What is streaming Split IO?](https://www.g2.com/discussions/what-is-streaming-split-io) - 1 comment ### 18. [Mend.io](https://www.g2.com/products/mend-io/reviews) Modern risk doesn't live in one layer, it lives between them. Mend.io is built for every risk, across AI and AppSec, securing the code layer, the AI layer, and the interactions between them. From discovery and red teaming to guardrails and runtime protection, Mend.io delivers continuous protection across the entire AI application lifecycle. Mend.io solutions include: 1. Mend AI secures the layer where modern risk actually lives—the interaction between code and AI. It continuously discovers AI components (agents, prompts, models), tests real behavioral risk through automated red teaming, and enforces in-app runtime guardrails for one continuous control system for the AI lifecycle. 2. Mend AppSec secures the modern code layer by continuously discovering and prioritizing risk across code, libraries, containers, and dependencies, giving teams the clarity they need to reduce exposure and ship secure software faster. 3. Mend Renovate secures the foundation of every codebase by automatically updating dependencies, rating the likelihood each update will succeed without breaking changes, and grouping them by confidence level so teams can resolve them faster. **Average Rating:** 4.3/5.0 **Total Reviews:** 106 **How Do G2 Users Rate Mend.io?** - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.2/10) - **Automated Scans:** 10.0/10 (Category avg: 9.1/10) **Who Is the Company Behind Mend.io?** - **Seller:** [Mend](https://www.g2.com/sellers/mend-ab79a83a-6747-4682-8072-a3c176489d0b) - **Company Website:** https://mend.io - **Year Founded:** 2011 - **HQ Location:** Boston, Massachusetts - **Twitter:** @Mend_io (11,256 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/2440656/ (256 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Software Engineer - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 38% Small-Business, 35% Mid-Market #### What Are Mend.io's Pros and Cons? **Pros:** - Scanning Efficiency (8 reviews) - Ease of Use (7 reviews) - Easy Integrations (6 reviews) - Scanning Technology (6 reviews) - Vulnerability Detection (6 reviews) **Cons:** - Integration Issues (6 reviews) - Limited Features (3 reviews) - Missing Features (3 reviews) - Complex Implementation (2 reviews) - Confusing Interface (2 reviews) ### What Do G2 Reviewers Say About Mend.io? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **scanning efficiency** of Mend.io, highlighting quick scans and detailed reporting for better management. - Users find Mend.io to be an **easy-to-use** tool that enhances security and provides responsive support. - Users value the **easy integrations** with source code repositories, enhancing security and simplifying their workflows. - Users find Mend.io's **scanning technology highly effective** for comprehensive binary, source code, and container scans. - Users value the **Vulnerability Detection** in Mend.io for its efficiency in identifying and prioritizing critical vulnerabilities quickly. **Cons:** - Users face **integration issues** with on-premise tools and experience difficulty getting features to work effectively. - Users feel the **limited features** of Mend.io hinder integration and functionality, leading to additional workarounds. - Users find the **missing features** in Mend.io limit functionality, requiring workarounds for integration and scanning processes. - Users face **complex implementation** challenges with Mend.io, requiring extensive support and causing delays in integration. - Users find the **confusing interface** of Mend.io awkward, especially when switching between different product portals. #### What Are Recent G2 Reviews of Mend.io? **"[Great Tool for Managing 3rd party libraries](https://www.g2.com/survey_responses/mend-io-review-6728890)"** **Rating:** 4.5/5.0 stars *— Johannes B.* [Read full review](https://www.g2.com/survey_responses/mend-io-review-6728890) --- **"[Mend.io review](https://www.g2.com/survey_responses/mend-io-review-8301799)"** **Rating:** 4.0/5.0 stars *— Verified User in Human Resources* [Read full review](https://www.g2.com/survey_responses/mend-io-review-8301799) --- #### What Are G2 Users Discussing About Mend.io? - [What is your experience regarding pricing and costs for Mend.io, and how does it compare to other open-source security solutions?](https://www.g2.com/discussions/what-is-your-experience-regarding-pricing-and-costs-for-mend-io-and-how-does-it-compare-to-other-open-source-security-solutions) - [What is Mend (formerly WhiteSource) used for?](https://www.g2.com/discussions/what-is-mend-formerly-whitesource-used-for) - [What is white Source bolt?](https://www.g2.com/discussions/what-is-white-source-bolt) - [What are SCA tools?](https://www.g2.com/discussions/what-are-sca-tools) - [What is software composition analysis SCA?](https://www.g2.com/discussions/what-is-software-composition-analysis-sca) ### 19. [Pynt - API Security Testing](https://www.g2.com/products/pynt-api-security-testing/reviews) Pynt is an innovative API Security Testing platform exposing verified API threats through simulated attacks. Hundreds of companies rely on Pynt to continuously monitor, classify and attack poorly secured APIs, before hackers do. **Average Rating:** 4.8/5.0 **Total Reviews:** 44 **How Do G2 Users Rate Pynt - API Security Testing?** - **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.2/10) - **Detection Rate:** 9.0/10 (Category avg: 8.9/10) - **Automated Scans:** 9.2/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 8.3/10 (Category avg: 8.4/10) **Who Is the Company Behind Pynt - API Security Testing?** - **Seller:** [Pynt](https://www.g2.com/sellers/pynt) - **Year Founded:** 2022 - **HQ Location:** Tel Aviv, IL - **Twitter:** @pynt_io (361 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/pynt (16 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer Software, Computer & Network Security - **Company Size:** 57% Small-Business, 23% Enterprise #### What Are Pynt - API Security Testing's Pros and Cons? **Pros:** - Vulnerability Detection (20 reviews) - Security (19 reviews) - API Management (17 reviews) - Easy Integrations (17 reviews) - Automation (15 reviews) **Cons:** - Complex Setup (12 reviews) - Setup Complexity (7 reviews) - Limited Features (4 reviews) - Poor Interface Design (4 reviews) - UX Improvement (4 reviews) ### What Do G2 Reviewers Say About Pynt - API Security Testing? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **flawless execution of vulnerability detection** in Pynt, enhancing security with minimal effort. - Users value the **seamless integration** and automated vulnerability detection of Pynt for enhanced API security. - Users value the **seamless integration** of Pynt in their workflows, ensuring efficient API security management and testing. - Users find **easy integrations** with tools like Postman and Burp Suite, simplifying their API security testing process. - Users appreciate the **automation capabilities** of Pynt, enabling seamless API security testing within existing development workflows. **Cons:** - Users find the **complex setup** of Pynt challenging initially, requiring time and the right understanding for smooth deployment. - Users find the **setup complexity** challenging, especially for beginners, requiring improvements for a more user-friendly experience. - Users find Pynt's **limited features** challenging, particularly in reporting and onboarding, affecting usability across teams. - Users find the **poor interface design** hinders usability and suggests improvements for a better experience. - Users note that the **user interface lacks usability** , indicating a need for significant improvements to enhance their experience. #### What Are Recent G2 Reviews of Pynt - API Security Testing? **"[Comprehensive Review of Pynt Tool](https://www.g2.com/survey_responses/pynt-api-security-testing-review-10046930)"** **Rating:** 5.0/5.0 stars *— Vijayaraghavan (Vijay) V.* [Read full review](https://www.g2.com/survey_responses/pynt-api-security-testing-review-10046930) --- **"[Performance and Usability Review of pynt G2](https://www.g2.com/survey_responses/pynt-api-security-testing-review-11135423)"** **Rating:** 5.0/5.0 stars *— Devanggiri G.* [Read full review](https://www.g2.com/survey_responses/pynt-api-security-testing-review-11135423) --- ### 20. [LevelBlue USM Anywhere](https://www.g2.com/products/levelblue-usm-anywhere/reviews) LevelBlue USM Anywhere is a cloud-based security management solution that accelerates and centralizes threat detection, incident response, and compliance management for your cloud, hybrid cloud, and on-premises environments. USM Anywhere includes purpose-built cloud sensors that natively monitor your Amazon Web Services (AWS) and Microsoft Azure cloud environments. On premises, lightweight virtual sensors run on Microsoft Hyper-V and VMware ESXi to monitor your virtual private cloud and physical IT infrastructure. With USM Anywhere, you can rapidly deploy sensors into your cloud and on-premises environments while centrally managing data collection, security analysis, and threat detection from the AlienVault Secure Cloud. Five Essential Security Capabilities in a Single SaaS Platform AlienVault USM Anywhere provides five essential security capabilities in a single SaaS solution, giving you everything you need for threat detection, incident response, and compliance management—all in a single pane of glass. With USM Anywhere, you can focus on finding and responding to threats, not managing software. An elastic, cloud-based security solution, USM Anywhere can readily scale to meet your threat detection needs as your hybrid cloud environment changes and grows. 1. Asset Discovery 2. Vulnerability Assessment 3. Intrusion Detection 4. Behavioral Monitoring 5. SIEM **Average Rating:** 4.4/5.0 **Total Reviews:** 102 **How Do G2 Users Rate LevelBlue USM Anywhere?** - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.2/10) - **Detection Rate:** 9.2/10 (Category avg: 8.9/10) - **Automated Scans:** 9.2/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 8.6/10 (Category avg: 8.4/10) **Who Is the Company Behind LevelBlue USM Anywhere?** - **Seller:** [LevelBlue](https://www.g2.com/sellers/levelblue-49a2e3c1-ca90-4308-b899-08973f657bae) - **HQ Location:** Dallas, Texas, United States - **LinkedIn® Page:** https://www.linkedin.com/company/levelbluecyber/ (782 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Financial Services - **Company Size:** 62% Mid-Market, 20% Small-Business #### What Are Recent G2 Reviews of LevelBlue USM Anywhere? **"[Comprehensive cloud security and monitoring platform](https://www.g2.com/survey_responses/levelblue-usm-anywhere-review-11718892)"** **Rating:** 5.0/5.0 stars *— Luis Emmanuel M.* [Read full review](https://www.g2.com/survey_responses/levelblue-usm-anywhere-review-11718892) --- **"[Impressive Cloud Based SIEM](https://www.g2.com/survey_responses/levelblue-usm-anywhere-review-9698214)"** **Rating:** 4.5/5.0 stars *— Goodness I.* [Read full review](https://www.g2.com/survey_responses/levelblue-usm-anywhere-review-9698214) --- #### What Are G2 Users Discussing About LevelBlue USM Anywhere? - [How has AlienVault USM supported your cybersecurity efforts, and what features do you rely on most?](https://www.g2.com/discussions/how-has-alienvault-usm-supported-your-cybersecurity-efforts-and-what-features-do-you-rely-on-most) - [What is AlienVault USM (from AT&T Cybersecurity) used for?](https://www.g2.com/discussions/what-is-alienvault-usm-from-at-t-cybersecurity-used-for) ### 21. [ResilientX Security Platform](https://www.g2.com/products/resilientx-security-platform/reviews) ResilientX Unified Exposure Management Platform is the leading platform that unifies Attack Surface Management, Web Application Security Testing, Network Security Testing, Cloud Security Posture Management, and Third-Party Risk Management. **Average Rating:** 5.0/5.0 **Total Reviews:** 17 **How Do G2 Users Rate ResilientX Security Platform?** - **Has the product been a good partner in doing business?:** 9.8/10 (Category avg: 9.2/10) - **Detection Rate:** 10.0/10 (Category avg: 8.9/10) - **Automated Scans:** 10.0/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 9.8/10 (Category avg: 8.4/10) **Who Is the Company Behind ResilientX Security Platform?** - **Seller:** [ResilientX](https://www.g2.com/sellers/resilientx) - **Year Founded:** 2022 - **HQ Location:** London - **Twitter:** @ResilientXcyber (33 Twitter followers) - **LinkedIn® Page:** http://www.linkedin.com/company/resilientx (12 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 47% Mid-Market, 35% Small-Business #### What Are ResilientX Security Platform's Pros and Cons? **Pros:** - Security (4 reviews) - Vulnerability Detection (4 reviews) - Comprehensive Security (3 reviews) - Customer Support (3 reviews) - Detection (3 reviews) **Cons:** - Complex Setup (1 reviews) - Difficult Customization (1 reviews) - Difficult Initial Setup (1 reviews) - Integration Issues (1 reviews) - Lack of Integration (1 reviews) ### What Do G2 Reviewers Say About ResilientX Security Platform? *AI-generated summary from verified user reviews* **Pros:** - Users commend the **robust security measures** of ResilientX, enhancing compliance and reducing vulnerabilities effectively. - Users value the **comprehensive human-powered testing** of ResilientX, ensuring thorough vulnerability detection and swift responsiveness. - Users value the **comprehensive security** of ResilientX, effectively addressing vulnerabilities and ensuring a secure gaming environment. - Users commend the **excellent customer support** of ResilientX, highlighting the team's responsiveness and expertise in security management. - Users appreciate the **prompt attack detection** by ResilientX, enhancing security and providing valuable vulnerability management insights. **Cons:** - Users find the **complex setup** of ResilientX challenging, particularly in onboarding and customizing dashboards for non-technical users. - Users express a need for more **difficult customization** options in ResilientX for non-technical stakeholders, affecting usability. - Users find the **difficult initial setup** challenging, wishing for a more streamlined onboarding process with better customization. - Users desire better **integration with existing SIEM systems** to enhance the efficiency of their security operations. - Users desire better **integration** with existing SIEM systems to enhance operational efficiency and effectiveness. #### What Are Recent G2 Reviews of ResilientX Security Platform? **"[Digital Asset Protection Against Cyber Threat](https://www.g2.com/survey_responses/resilientx-security-platform-review-10773507)"** **Rating:** 5.0/5.0 stars *— Reinier M.* [Read full review](https://www.g2.com/survey_responses/resilientx-security-platform-review-10773507) --- **"[Great solution for Lowe's Company Inc](https://www.g2.com/survey_responses/resilientx-security-platform-review-10929795)"** **Rating:** 5.0/5.0 stars *— Argelis H.* [Read full review](https://www.g2.com/survey_responses/resilientx-security-platform-review-10929795) --- ### 22. [Semperis Directory Services Protector](https://www.g2.com/products/semperis-directory-services-protector/reviews) Semperis Directory Services Protector puts Active Directory security and identity threat detection and response on autopilot with continuous AD threat monitoring, real-time alerts, and autonomous remediation capabilities. DSP helps you respond more effectively to Active Directory security incidents and everyday operational mistakes. It provides a complete picture of risk exposure in hybrid environments and provides backup and recovery of critical Entra ID resources **Average Rating:** 4.8/5.0 **Total Reviews:** 25 **How Do G2 Users Rate Semperis Directory Services Protector?** - **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.2/10) - **Detection Rate:** 7.7/10 (Category avg: 8.9/10) - **Automated Scans:** 8.1/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 8.1/10 (Category avg: 8.4/10) **Who Is the Company Behind Semperis Directory Services Protector?** - **Seller:** [Semperis](https://www.g2.com/sellers/semperis) - **Company Website:** https://www.semperis.com - **Year Founded:** 2015 - **HQ Location:** Hoboken, New Jersey - **Twitter:** @SemperisTech (10,074 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/semperis/ (674 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 80% Enterprise, 20% Mid-Market #### What Are Semperis Directory Services Protector's Pros and Cons? **Pros:** - Ease of Use (8 reviews) - Security (7 reviews) - Features (6 reviews) - Customer Support (5 reviews) - Automation (4 reviews) **Cons:** - Communication Issues (2 reviews) - Data Inconsistency (2 reviews) - Lack of Information (2 reviews) - Limited Reporting (2 reviews) - Poor Customer Support (2 reviews) ### What Do G2 Reviewers Say About Semperis Directory Services Protector? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of Semperis Directory Services Protector, simplifying daily Active Directory management tasks. - Users value the **security safeguards** of Semperis DSP, providing robust protection for their Identity Infrastructure. - Users value the **live security indicators and auto undo functionality** of Semperis DSP, enhancing protection and management. - Users commend the **excellent customer support** of Semperis DSP, appreciating the prompt assistance during critical times. - Users value the **automation features** of Semperis DSP, enhancing security and simplifying Active Directory management. **Cons:** - Users face **communication issues** with support regarding database error messages, affecting their overall experience. - Users experience occasional **data inconsistency** issues with Semperis DSP, but support can resolve these quickly. - Users find the **lack of information** on IOE frustrating, especially with limited AD report data from audits. - Users find the **reporting limited** , expressing a need for improved reports and better communication with support. - Users feel that the **customer support** could be significantly improved, particularly in communication and assistance requests. #### What Are Recent G2 Reviews of Semperis Directory Services Protector? **"[Looking for a great Tool to Monitor AD? It is right Here!](https://www.g2.com/survey_responses/semperis-directory-services-protector-review-12342674)"** **Rating:** 5.0/5.0 stars *— Benjamin E.* [Read full review](https://www.g2.com/survey_responses/semperis-directory-services-protector-review-12342674) --- **"[Granular Instant Rollback & Continuous AD Vulnerability Visibility](https://www.g2.com/survey_responses/semperis-directory-services-protector-review-12342665)"** **Rating:** 5.0/5.0 stars *— Jose Miguel C.* [Read full review](https://www.g2.com/survey_responses/semperis-directory-services-protector-review-12342665) --- ### 23. [APPCHECK](https://www.g2.com/products/appcheck/reviews) AppCheck is a Dynamic Application Security Testing (DAST) and network vulnerability testing solution, developed and supported by experienced penetration testers. We approach security testing as a hacker would, leveraging multiple proprietary crawling engines to analyse target behaviour across both modern and traditional technologies, including Single Page Applications (SPAs), APIs, and complex authentication flows such as SSO, 2FA, and TOTP. Organisations can conduct unlimited security assessments across Web Applications, SPAs, APIs, cloud services, networks, across internal or external assets. Supporting production and UAT testing, AppCheck also helps organisations ‘shift left’ by integrating with CI/CD pipelines and build servers, including ADO, GitHub, Jenkins, TeamCity, CircleCI, TravisCI, Bamboo, and GitLab CI/CD. Allowing automated security testing throughout development, identifying risks as soon as changes are introduced. AppCheck are proud to be part of the CVE Numbering Authority (CNA), contributing to global security research **Average Rating:** 4.6/5.0 **Total Reviews:** 67 **How Do G2 Users Rate APPCHECK?** - **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.2/10) - **Detection Rate:** 9.2/10 (Category avg: 8.9/10) - **Automated Scans:** 9.5/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 8.8/10 (Category avg: 8.4/10) **Who Is the Company Behind APPCHECK?** - **Seller:** [APPCHECK](https://www.g2.com/sellers/appcheck) - **Company Website:** https://www.appcheck-ng.com - **Year Founded:** 2014 - **HQ Location:** Leeds, GB - **Twitter:** @AppcheckNG (649 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/appcheck-ng-ltd/ (106 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 49% Mid-Market, 30% Small-Business #### What Are APPCHECK's Pros and Cons? **Pros:** - Ease of Use (5 reviews) - Vulnerability Detection (5 reviews) - Features (4 reviews) - Pentesting Efficiency (4 reviews) - Scanning Efficiency (4 reviews) **Cons:** - UX Improvement (2 reviews) - API Issues (1 reviews) - Difficult Customization (1 reviews) - Difficult Learning Curve (1 reviews) - False Positives (1 reviews) ### What Do G2 Reviewers Say About APPCHECK? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** of AppCheck, making complex processes simple and efficient. - Users value the **practical insights into vulnerabilities** provided by AppCheck, enhancing overall security and efficiency. - Users value the **excellent functionality and support** of AppCheck, enhancing security with tailored reporting and continuous scans. - Users laud the **pentesting efficiency** of AppCheck, significantly reducing the need for manual testing and enhancing security. - Users love the **scanning efficiency** of AppCheck, finding it reliable and easy to integrate within development workflows. **Cons:** - Users suggest improving **UX and customization** in AppCheck for better alignment with the latest standards and enhanced experience. - Users find the **API issues** frustrating, as endpoint changes require service requests despite ongoing improvements based on feedback. - Users feel that **difficult customization** hampers their ability to tailor reports to their specific needs and context. - Users note a **difficult learning curve** with Appcheck, but overall find the product satisfactory. - Users find the **false positives** in scan results problematic, necessitating manual validation and complicating the reporting process. #### What Are Recent G2 Reviews of APPCHECK? **"[Effortless Vulnerability Management with APPCHECK](https://www.g2.com/survey_responses/appcheck-review-12463853)"** **Rating:** 5.0/5.0 stars *— Aaron H.* [Read full review](https://www.g2.com/survey_responses/appcheck-review-12463853) --- **"[Great onboarding experience and trial](https://www.g2.com/survey_responses/appcheck-review-11771398)"** **Rating:** 4.0/5.0 stars *— Tyler S.* [Read full review](https://www.g2.com/survey_responses/appcheck-review-11771398) --- ### 24. [Acunetix by Invicti](https://www.g2.com/products/acunetix-by-invicti/reviews) Acunetix (by Invicti) is an automated application security testing tool that enables small security teams to tackle huge application security challenges. With fast scanning, comprehensive results, and intelligent automation, Acunetix helps organizations to reduce risk across all types of web applications, websites, and APIs. With Acunetix, security teams can: - Save time and resources by automating manual security processes - Work more seamlessly with developers, or embrace DevSecOps by integrating directly into development tools - Feel confident that every web application has been crawled entirely thanks to DAST + IAST scanning and intelligent crawling technology - Finally, make web application and API security a priority and not just an add-on with a solution that is dedicated to application and API security 100% of the time You can depend on Acunetix to meet your organization’s needs today and face the challenges of modern web technology together tomorrow. **Average Rating:** 4.1/5.0 **Total Reviews:** 100 **How Do G2 Users Rate Acunetix by Invicti?** - **Has the product been a good partner in doing business?:** 8.2/10 (Category avg: 9.2/10) - **Detection Rate:** 8.5/10 (Category avg: 8.9/10) - **Automated Scans:** 8.6/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 7.9/10 (Category avg: 8.4/10) **Who Is the Company Behind Acunetix by Invicti?** - **Seller:** [Invicti Security](https://www.g2.com/sellers/invicti-security-04cb0d3d-fd96-45b2-83dc-2038fc9dac92) - **Company Website:** https://www.invicti.com/ - **Year Founded:** 2018 - **HQ Location:** Austin, Texas - **Twitter:** @InvictiSecurity (2,557 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/invicti-security/people/ (335 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 40% Enterprise, 34% Mid-Market #### What Are Acunetix by Invicti's Pros and Cons? **Pros:** - Vulnerability Detection (7 reviews) - Ease of Use (6 reviews) - Security (5 reviews) - Vulnerability Identification (5 reviews) - Accuracy of Results (4 reviews) **Cons:** - Expensive (4 reviews) - Complexity (3 reviews) - Complex Setup (3 reviews) - Slow Scanning (3 reviews) - Difficult Customization (2 reviews) ### What Do G2 Reviewers Say About Acunetix by Invicti? *AI-generated summary from verified user reviews* **Pros:** - Users value the **accurate and fast vulnerability detection** of Acunetix, enabling efficient security management with minimal false positives. - Users praise the **ease of use** in Acunetix, appreciating its quick setup and integration into workflows. - Users highlight the **effective vulnerability detection** of Acunetix, enhancing overall web application security and efficiency. - Users value the **effective vulnerability identification** of Acunetix, enhancing security and simplifying remediation processes. - Users commend Acunetix for its **impressive accuracy in vulnerability detection** , greatly enhancing web application security. **Cons:** - Users find the **pricing structure expensive** , making it less accessible for smaller teams or projects. - Users find the **complexity** of setup and scans in Acunetix can be overwhelming and resource-intensive, impacting workflow. - Users find the **complex setup** of Acunetix challenging, especially for beginners and during deep scans of large applications. - Users experience **slow scanning** with Acunetix, particularly with large applications, affecting overall efficiency and workflow. - Users find **difficult customization** in Acunetix, requiring technical know-how and patience for effective integration and setup. #### What Are Recent G2 Reviews of Acunetix by Invicti? **"[Powerful Security Scanning Made Easy with Acunetix](https://www.g2.com/survey_responses/acunetix-by-invicti-review-11964967)"** **Rating:** 5.0/5.0 stars *— Deepesh V.* [Read full review](https://www.g2.com/survey_responses/acunetix-by-invicti-review-11964967) --- **"[Effortless Vulnerability Detection That Fits Seamlessly into DevSecOps](https://www.g2.com/survey_responses/acunetix-by-invicti-review-11909125)"** **Rating:** 5.0/5.0 stars *— Ranit D.* [Read full review](https://www.g2.com/survey_responses/acunetix-by-invicti-review-11909125) --- #### What Are G2 Users Discussing About Acunetix by Invicti? - [How has Acunetix supported your web security efforts, and what features do you rely on most?](https://www.g2.com/discussions/how-has-acunetix-supported-your-web-security-efforts-and-what-features-do-you-rely-on-most) - [What is Acunetix by Invicti used for?](https://www.g2.com/discussions/what-is-acunetix-by-invicti-used-for) ### 25. [Kiuwan Code Security & Insights](https://www.g2.com/products/kiuwan-code-security-insights/reviews) Fast, Flexible Code Security! Kiuwan is a robust, end-to-end application security platform that integrates seamlessly into your development process. Our toolset includes Static Application Security Testing (SAST), Software Composition Analysis (SCA), Software Governance and Code Quality, empowering your team to quickly identify and remediate vulnerabilities. By integrating seamlessly into your CI/CD pipeline, Kiuwan enables early detection and remediation of security issues. Kiuwan supports strict compliance with industry standards including OWASP, CWE, MISRA, NIST, PCI DSS, and CERT, among others. Top features: ✅ Extensive language support: Over 30 programming languages. ✅ Detailed action plans: Prioritize remediation with tailored action plans. ✅ Code Security: Seamless Static Application Security Testing (SAST) integration. ✅ Insights: On-demand or continuous scanning Software Composition Analysis (SCA) to help reduce third-party threats. ✅ One-click Software Bill of Materials (SBOM) generation. Kiuwan is now part of Sembi - a global portfolio of market-leading software brands focused on software quality, security, and developer productivity. Code Smarter. Secure Faster. Ship Sooner **Average Rating:** 4.5/5.0 **Total Reviews:** 29 **How Do G2 Users Rate Kiuwan Code Security & Insights?** - **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 9.2/10) - **Detection Rate:** 8.5/10 (Category avg: 8.9/10) - **Automated Scans:** 8.6/10 (Category avg: 9.1/10) - **Configuration Monitoring:** 6.5/10 (Category avg: 8.4/10) **Who Is the Company Behind Kiuwan Code Security & Insights?** - **Seller:** [Sembi](https://www.g2.com/sellers/sembi) - **Year Founded:** 2023 - **HQ Location:** Austin, US - **LinkedIn® Page:** https://www.linkedin.com/company/sembi-inc/ (94 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Banking - **Company Size:** 41% Enterprise, 35% Mid-Market #### What Are Kiuwan Code Security & Insights's Pros and Cons? **Pros:** - Accuracy (2 reviews) - Accuracy of Findings (2 reviews) - Customer Support (2 reviews) - Ease of Use (2 reviews) - Automation Testing (1 reviews) ### What Do G2 Reviewers Say About Kiuwan Code Security & Insights? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **accuracy of the results** from Kiuwan Code Security & Insights, ensuring reliable code assessments. - Users are impressed by the **accuracy of findings** from Kiuwan, valuing its reliable code scan results. - Users appreciate the **efficient customer support** of Kiuwan, which enhances their overall satisfaction and experience. - Users appreciate the **user-friendly interface** of Kiuwan Code Security & Insights, enhancing their overall experience and satisfaction. - Users value the **user-friendly interface** of Kiuwan Code Security & Insights, enhancing ease of use and satisfaction. #### What Are Recent G2 Reviews of Kiuwan Code Security & Insights? **"[Impeccable Security and Code Analysis, with Potential for Improvement in Customization](https://www.g2.com/survey_responses/kiuwan-code-security-insights-review-12676887)"** **Rating:** 5.0/5.0 stars *— Abelardo I.* [Read full review](https://www.g2.com/survey_responses/kiuwan-code-security-insights-review-12676887) --- **"[Elevated our software security to the next level. Improved our code quality.](https://www.g2.com/survey_responses/kiuwan-code-security-insights-review-11651809)"** **Rating:** 5.0/5.0 stars *— Abdullah Enes K.* [Read full review](https://www.g2.com/survey_responses/kiuwan-code-security-insights-review-11651809) --- ## What Is Vulnerability Scanner Software? [DevSecOps Software](https://www.g2.com/categories/devsecops) ## What Software Categories Are Similar to Vulnerability Scanner Software? - [Penetration Testing Tools](https://www.g2.com/categories/penetration-testing-tools) - [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast) - [Risk-Based Vulnerability Management Software](https://www.g2.com/categories/risk-based-vulnerability-management) --- ## How Do You Choose the Right Vulnerability Scanner Software? ### What You Should Know About Vulnerability Scanner Software ### What is Vulnerability Scanner Software? Vulnerability scanners are used to examine applications, networks, and environments for security flaws and misconfigurations. These tools run a variety of dynamic security tests to identify security threats along an application or network’s attack surface. Scans can be used for anything from an application penetration test to a compliance scan. Depending on the specific objectives a user has, they can customize the vulnerability scanner to test for specific issues or requirements. Companies can configure these tests to their unique environment. Companies that handle lots of personal or financial data may scan to ensure every transaction or datastore is encrypted from the public. They could also test their web applications against specific threats like SQL injection or cross-site scripting (XSS) attacks. The highly-customizable nature of vulnerability scanners provides users with tailor-made solutions for application and network security examination. Many of these tools offer continuous scanning and testing for nonstop protection and monitoring. Whatever administrators set as a priority will be tested periodically and inform employees of issues or incidents. Continuous monitoring makes it much easier to discover vulnerabilities before they become an issue and drastically reduce the amount of time a vulnerability takes to remediate. Top vulnerability scanner software with CVE remediation guidance typically combines automated scanning with prioritized fix recommendations that map findings to severity scores, exposure paths, and patch availability. Based on G2 reviews, security teams evaluate vulnerability scanner software by comparing CVE remediation depth, false positive rates, and how quickly the platform integrates into existing CI/CD pipelines and cloud environments. Key Benefits of Vulnerability Scanner Software - Scan networks and applications for security flaws - Diagnose, track, and remediate vulnerabilities - Identify and resolve misconfigurations - Perform ad hoc security tests ### Why Use Vulnerability Scanner Software? Applications and networks are only beneficial to a business if they operate smoothly and securely. Vulnerability scanners are a useful tool to view internal systems and applications from the perspective of the attacker. These tools allow for dynamic testing while applications operate. This helps security teams take a step beyond patches and code analysis to evaluate security posture while the application, network, or instance actually runs. **Application security—** Cloud, web, and desktop applications all require security, but operate differently. While many vulnerability scanners support testing for all kinds of applications, vulnerability scanners often support a few application types, but not others. Still, they will all examine the application itself, as well as the paths a user needs to access it. For example, if a vulnerability scanner is used on a web application, the tool will take into account the various attack vectors a hacker might take. This includes a site’s navigation, regional access, privileges, and other factors decided by the user. From there, the scanner will output reports on specific vulnerabilities, compliance issues, and other operational flaws. **Networks —** While software applications are often the most obvious use cases for vulnerability scanners, network vulnerability scanners are also quite common. These tools take into account the network itself, as well as computers, servers, mobile devices and any other asset accessing a network. This helps businesses identify vulnerable devices and abnormal behaviors within a network to identify and remediate issues as well as improve their network's security posture. Many even provide visual tools for mapping networks and their associated assets to simplify the management and prioritization of vulnerabilities requiring remediation. **Cloud environments —** Not to be confused with cloud-based solutions delivered in a SaaS model, cloud vulnerability scanners examine cloud services, cloud computing environments, and integrated connections. Like network vulnerability scanners, cloud environments require an examination on a few levels. Cloud assets come in many forms including devices, domains, and instances; but all must be accounted for and scanned. In a properly secured cloud computing environment, integrations and API connections, assets, and environments must all be mapped, configurations must be monitored, and requirements must be enforced. Based on G2 reviews, vulnerability scanner platforms generating VLAN audit reports are evaluated primarily by security teams running segmented enterprise networks where compliance frameworks (PCI, HIPAA, SOC 2, ISO 27001) require documented scans across each network zone. Reviewers point to audit-ready compliance reporting, granular scan scope by IP range and network segment, and exportable evidence formats as the features that determine whether the platform shortens the audit prep cycle or adds another step to it. ### What are the Common Features of Vulnerability Scanner Software? Vulnerability scanners can provide a wide range of features, but here are a few of the most common found in the market. **Network mapping —** Network mapping features provide a visual representation of network assets including endpoints, servers, and mobile devices to intuitively demonstrate an entire network’s components. **Web inspection —** Web inspection features are used to assess the security of a web application in the context of its availability. This includes site navigation, taxonomies, scripts, and other web-based operations that may impact a hacker’s abilities. [**Defect tracking**](https://www.g2.com/categories/vulnerability-scanner/f/issue-tracking) **—** Defect and issue tracking functionality helps users discover and document vulnerabilities and track them to their source through the resolution process. **Interactive scanning —** Interactive scanning or interactive application security testing features allow a user to be directly involved in the scanning process, watch tests in real time, and perform ad hoc tests. [**Perimeter scanning**](https://www.g2.com/categories/vulnerability-scanner/f/perimeter-scanning) **—** Perimeter scanning will analyze assets connected to a network or cloud environment for vulnerabilities. [**Black box testing**](https://www.g2.com/categories/vulnerability-scanner/f/black-box-testing) **—** Black box scanning refers to tests conducted from the hacker’s perspective. Black box scanning examines functional applications externally for vulnerabilities like SQL injection or XSS. **Continuous monitoring —** Continuous monitoring allows users to set it and forget it. They enable scanners to run all the time as they alert users of new vulnerabilities. [**Compliance monitoring**](https://www.g2.com/categories/vulnerability-scanner/f/compliance-testing) **—** Compliance-related monitoring features are used to monitor data quality and send alerts based on violations or misuse. **Asset discovery —** Asset discovery features unveil applications in use and trends associated with asset traffic, access, and usage. **Logging and reporting —** Log documentation and reporting provides required reports to manage operations. It provides adequate logging to troubleshoot and support auditing. **Threat intelligence —** Threat intelligence features integrate with or store information related to common threats and how to resolve them once incidents occur. **Risk analysis —** Risk scoring and risk analysis features identify, score, and prioritize security risks, vulnerabilities, and compliance impacts of attacks and breaches. **Extensibility —** Extensibility and integration features provide the ability to extend the platform or product to include additional features and functionalities. Based on G2 reviews, the most trusted vulnerability scanner platforms in 2026 for security teams lead on CVE remediation guidance and easy setup onboarding, with reviewers describing time-to-first-scan in hours rather than weeks. SOC and AppSec teams point to clear remediation steps, severity scoring, and actionable findings as the features that distinguish platforms they actively use from ones that produce noise. Vulnerability scanner solutions with easy setup onboarding are highlighted in recent reviews for delivering full environment visibility on day one through agentless, API-driven architectures, with documentation that reduces the engineering lift typically associated with rolling out vulnerability scanning. Many vulnerability scanner tools will also offer the following features:  - [Configuration monitoring capabilities](https://www.g2.com/categories/vulnerability-scanner/f/configuration-monitoring) - [Automated scan capabilities](https://www.g2.com/categories/vulnerability-scanner/f/automated-scans) - [Manual application testing capabilities](https://www.g2.com/categories/vulnerability-scanner/f/manual-application-testing) - [Static code analysis capabilities](https://www.g2.com/categories/vulnerability-scanner/f/static-code-analysis) ### Potential Issues with Vulnerability Scanner Software **False positives —** False positives are one of the most common issues with security tools. They indicate a tool is not running efficiently and introduce lots of unnecessary labor. Users should examine figures related to specific products and their accuracy before purchasing a solution. **Integrations —** Integrations can make an application or product do virtually anything, but only if the integration is supported. If a specific solution must be integrated or a specific data source is highly relevant, be sure it’s compatible with the vulnerability scanner before making that decision. **Scalability —** Scalability is always important, especially for growing teams. Cloud and SaaS-based solutions are traditionally the most scalable, but desktop and open source tools may be as well. Scalability will be important for teams considering collaborative use, concurrent use, and multi-application and environment scanning. ### Software and Services Related to Vulnerability Scanner Software These technology families are either closely related to vulnerability scanners or there is frequent overlap between products. [**Risk-based vulnerability management software**](https://www.g2.com/categories/risk-based-vulnerability-management) **—** Risk-based vulnerability management software is used to analyze security posture based on a wide array of risk factors. From there, companies prioritize vulnerabilities based on their risk score. These tools often have some overlapping features, but they’re more geared towards prioritizing risks in large organizations rather than identifying vulnerabilities to individual applications or environments. [**Dynamic application security testing (DAST) software**](https://www.g2.com/categories/dynamic-application-security-testing-dast) **—** DAST software is very closely related to vulnerability scanners and are sometimes used interchangeably. The differentiating factor here, though, is the ability to scan networks, cloud services, and IT assets in addition to applications. While they do scan for vulnerabilities, they won’t allow users to map networks, visualize environments, or examine vulnerabilities beyond the scope of the application. [**Static application security testing (SAST) software**](https://www.g2.com/categories/static-application-security-testing-sast) **—** SAST software is not that similar to vulnerability scanners, unlike DAST tools. SAST tools allow for the examination of source code and non-operational application components. They also can’t simulate attacks or perform functional security tests. Still, these can be useful for defect and bug tracking if the vulnerability is rooted in an application’s source code. [**Penetration testing software**](https://www.g2.com/categories/penetration-testing) **—** Penetration testing software is one aspect of vulnerability scanning, but a penetration test will not provide a wide variety of security tests. They are useful for testing common attack types, but they won’t be very effective in identifying and remediating the root cause of a vulnerability. Based on G2 reviews, Software Composition Analysis tools Jenkins GitLab integration continuous vulnerability scanning is the workflow pattern reviewers describe as the standard for developer-led security programs running checks inside the build pipeline rather than as a separate stage. Reviewers point to agentless, API-driven scanners integrating into CI/CD pipelines to catch secrets, misconfigurations, and open-source dependency vulnerabilities pre-deployment as the setup that scales with engineering velocity. Reviewers note that consolidated platforms unifying SCA, SAST, and exposure-management scanning under one interface are the preferred consolidation pattern over stitching together standalone tools.