We primarily use intruder's core scanning product, to scan both on schedules and for emerging threats. The fact it scans automatically for emerging threats is very handy as we can always be confident we'll get notified if we are vulnerable to a new exploit. Then being able to produce a report for the hosts we require has been useful during audits.

Since we were approached by our customers to provide a vulnerability scanning results in Audits, we searched for a solution that will be "set and forget" style and that is exactly what we got. We have provided the tool our public endpoints and pretty much did not touch it ever since. We get regular daily new and weekly scan results and should there be any new thread, we get immediate remedy proposal. The fact that nobody needs to actively watch for new vulnerabilities and all our endpoints are scanned immediately is perhaps the best feature!

I use Intruder for vulnerability scanning and annual pentesting. It gives me peace of mind on the evolving CVE landscape and helps me stay abreast of what's happening in the security landscape. I like that issues are almost always genuine, with the best false positive rate I've seen. Its thorough coverage, automatic weekly scanning, and integration with systems like Vanta and Jira for compliance purposes are also really valuable. The initial setup was pretty simple, taking about an hour or so.