G2

Gareth P.

Director of Software Engineering

Small-Business (50 or fewer emp.)

9/18/2026

"Daily Scans and Rapid CVE Response That Keep Us Confident"

4/5

What do you like best about Intruder?

What Intruder is best at, for us, is the daily cadence combined with rapid response to newly announced CVEs. We get a scan every day as a matter of course, and rather than waiting for the next scheduled run when a new CVE is announced, Intruder kicks off an immediate scan against our systems. That gives us confidence we're not sitting exposed to a known vulnerability for hours or days while waiting on a routine check. Between the daily baseline and the on-demand emergency scans, it works well as both a retrospective health check ("are things still okay") and a proactive early-warning system when something new hits the wild. Review collected by and hosted on G2.com.

What do you dislike about Intruder?

If I had to point to something, it would be the UI. There's quite a lot to navigate, and it isn't always obvious what to prioritise right now to move the needle on our security score. A bit more guidance on "here's the one thing to fix next for the biggest score improvement" would go a long way, rather than leaving us to work that out by scanning through the interface ourselves. Review collected by and hosted on G2.com.

What problems is Intruder solving and how is that benefiting you?

Before Intruder, vulnerability visibility across our estate was more reactive; we relied on scheduled penetration tests and periodic reviews to catch exposure, which left gaps between checks. Now, with daily scans and immediate on-demand scanning the moment a new CVE is announced, we have continuous visibility rather than a point-in-time snapshot. That means we can respond to emerging threats within hours rather than waiting for the next scheduled review, and it gives us an ongoing, evidence-based record of our security posture that supports our broader compliance work (SOC2 and customer security questionnaires). The net benefit is confidence, both internally and when we need to demonstrate to customers and auditors that we're actively monitoring and responding to vulnerabilities, not just checking a box once a quarter. Review collected by and hosted on G2.com.