G2

William H.

Small-Business (50 or fewer emp.)

10/27/2026

"Fast, Credible Pen Test Results with Clear, Non-Technical Guidance"

5/5

What do you like best about Clone Systems Penetration Testing?

I could buy it online and start the same day, with no scoping calls or waiting weeks for an engineer. It tested behind the login with real credentials, so it covered what a signed-in user of my app could actually reach, not just the public pages. Findings showed up in the portal as the test ran, and each one came with proof it was exploitable, so I wasn’t chasing false positives. The AI assistant explained findings in plain English and drafted fix steps for my stack, which mattered a lot since I’m not technical. Retesting inside the 30-day window was included, so I could confirm a fix worked before launch, and the report has an executive summary I can hand to anyone who asks. Review collected by and hosted on G2.com.

What do you dislike about Clone Systems Penetration Testing?

The 30-day window goes by fast if your fixes depend on a developer’s schedule, so you need to be ready to remediate as soon as results come in. It’s a network and web app test, so it doesn’t look inside the native iOS or Android app packages themselves; for that you’d need their engineer-led mobile app test. And the AI assistant is an add-on rather than included by default, which I’d have liked in the base plan since it’s the piece that makes the findings readable for a non-technical founder. Review collected by and hosted on G2.com.

Recommendations to others considering Clone Systems Penetration Testing:

Line up whoever will be making the fixes before you start. The test window is 30 days and results come in quickly, so the time goes fast if your developer isn’t available. Create a separate test user account for the credentialed test instead of using your own login. If you’re not technical, budget for the AI assistant; without it the findings are harder to act on. Keep in mind this tests the web app and backend, not the native iOS or Android app itself. That’s a different, engineer-led service, so plan for that separately if you need it. Review collected by and hosted on G2.com.

What problems is Clone Systems Penetration Testing solving and how is that benefiting you?

I’m a solo founder getting a mobile app ready to launch on iOS and Android, and I needed to know the web app and backend behind it were secure before real users signed up. I don’t have a security team, so I ran a credentialed automated penetration test through Clone Systems. It logged in as a real user and tested what someone with an account could actually reach, which is what worried me most. The report was clear enough for a non-technical person to understand, with findings ranked by severity and plain explanations of what to fix. The biggest benefit is confidence: I know what was tested, what was found, and that it was fixed before launch, and I have a report I can show app stores, partners, or anyone who asks how we handle security. Review collected by and hosted on G2.com.