G2

Elia R.

Small-Business (50 or fewer emp.)

9/26/2026

"Rigorous, genuinely hands-on pentest partner that behaves like part of your team"

5/5

What do you like best about Stingrai Inc.?

The technical depth is well beyond what we expected at this price point. The findings weren't scanner output with a logo on top - the team traced issues back to specific code paths, explained why each one existed, and in several cases pointed out that the fix was extending a control we already had rather than building something new. That made remediation planning dramatically faster.

Two things stood out. First, they were explicit about which of our controls held up under testing, not just which ones failed. That honesty made the whole report more credible and gave us something concrete to show stakeholders. Second, their remediation guidance went past "here's the vulnerability" into practical follow-through, including a step that protected our own customers rather than just closing our ticket.

The responsiveness is what I'd actually highlight. Vulnerabilities were surfaced through their PTaaS platform as they were found rather than held back for the final report, so we could start triaging mid-engagement. And when we came back with a detailed list of changes we wanted in the report, they returned a revised version within 24 hours that addressed every point - including reworking one finding's remediation advice once we'd discussed the real root cause together. That willingness to engage on the substance rather than defend the first draft is rare. Review collected by and hosted on G2.com.

What do you dislike about Stingrai Inc.?

Genuinely hard to find much. The one thing: the coverage and limitations detail - environment tested, roles used, endpoints actually covered - wasn't in the reporting template by default. We asked for it and they added it properly in a revised report within 24 hours. I'd rather see that as standard in the template from the start, but the responsiveness when we raised it was excellent.

Disclosure: our engagement included a post-engagement discount tied to submitting reviews. The rating reflects our actual experience and was not conditional on the score. Review collected by and hosted on G2.com.

Recommendations to others considering Stingrai Inc.:

Put the work into scoping up front. We came to them with a detailed inventory of our applications, roles and API surface, and the quality of what came back reflected that. Be specific about what your auditor needs the report to state, and say it before the engagement starts rather than after. Also take them up on the support calls - they're genuinely unlimited and the team is quick to respond. Review collected by and hosted on G2.com.

What problems is Stingrai Inc. solving and how is that benefiting you?

We needed an independent, human-led penetration test of our web applications and APIs to satisfy our annual testing control for SOC 2, and we needed it to be real security work rather than a compliance checkbox. Stingrai delivered both: evidence our auditors can rely on, and a findings list our engineers are actually acting on. The included retest window and ongoing scanning mean the engagement doesn't end when the report lands. Review collected by and hosted on G2.com.