G2

Verified User in Fund-Raising

Mid-Market (51-1000 emp.)

10/16/2019

"Automatic vulnerability scanning / Responsble Disclosure and Bug Bounty facilitator"

4/5

What do you like best about Zerocopter?

I like having Zerocopter scan our websites with their automatic tools. Though this isn't a replacement for full security assessments by hand, it can detect most common mistakes. ZC also will do the first triage for any responsible disclosures that are reported using their tool.

The bug bounty option we have yet to implement but look promising. Review collected by and hosted on G2.com.

What do you dislike about Zerocopter?

If you enable "informational" reporting you get way too much alerts. Which you cannot really bulk-delete or acknowledge. This should be easier. Also, if a fix is done for a reported issue, the only way to see that in ZC is because the scanner doesn't detect it anymore. This should be more clear. Review collected by and hosted on G2.com.

Recommendations to others considering Zerocopter:

If you want to outsource the basic vulnerability scans, your frontend responsible disclosure process and a bug bounty program, give Zerocopter a good look. Review collected by and hosted on G2.com.

What problems is Zerocopter solving and how is that benefiting you?

All services provided will help making your internet presence more safe. You will stil want to the the yearly full security assessment by hand (or outsourced) but having a daily/weekly automatic service makes sure the basics are covered. Review collected by and hosted on G2.com.