Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
API critique offers a penetration testing solution specifically designed for enhancing REST API Security.
We have pioneered the first-ever pentesting tool, marking a significant advancement in safeguarding APIs amidst the increasing number of targeted attacks. Drawing from OWASP guidelines and our extensive expertise in penetration testing, we ensure that a wide array of vulnerabilities is thoroughly evaluated.
Our scanning tool assesses the severity of issues using the CVSS standard, which is recognized and utilized by numerous respected organizations, allowing your development and operations teams to effectively prioritize vulnerabilities with ease.
Results from your scans are available in multiple reporting formats such as PDF and HTML, catering to both stakeholders and technical teams, while we also offer XML and JSON formats for automation tools to facilitate the creation of tailored reports.
Moreover, development and operations teams can enhance their knowledge through our exclusive Knowledge Base, which outlines potential attacks and provides countermeasures along with remediation steps to effectively reduce risks to your APIs.
This comprehensive approach not only strengthens your API security posture but also empowers your teams with the insights needed to proactively address vulnerabilities.
Description
Clone Systems provides an automated penetration testing service that operates through a web browser, catering to teams in need of evaluating both external and internal infrastructures, Active Directory, cloud setups, web applications, and various APIs. Users can specify their targets and exclusions within an online portal, allowing them to initiate attack playbooks that are designed to be safe for production environments and aimed at identifying exploitable vulnerabilities. The results include information on the severity of issues, evidence of potential exploits, recommendations for remediation, and a connection to the MITRE ATT&CK framework; furthermore, teams have the option to retest after implementing fixes during a 30-day evaluation period. The generated reports feature an executive overview along with technical specifics to aid in security and compliance processes, addressing standards such as PCI DSS 4.0.1, HIPAA, SOC 2, and ISO 27001. In addition, Clone Systems provides the option of separately scoped penetration testing led by engineers for situations that necessitate a more hands-on assessment approach. This combination of automated and manual testing ensures comprehensive coverage of security vulnerabilities.
API Access
Has API
No
API Access
Has API
No
Screenshots View All
No images available
Integrations
No details available.
Integrations
No details available.
Pricing Details
$199 per month
Free Trial
No
Free Version
No
Pricing Details
$1,995 one-time
Automated external testing starts at $1,995 for one target over 30 days; internal testing starts at $2,995 for up to 25 hosts over 30 days. Annual programs start at $5,995/year. Published pages give different starting prices for authenticated web application testing, so confirm that scope and price with Clone Systems.
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Entersoft Information Systems
Country
India
Website
www.apicritique.com
Vendor Details
Company Name
Clone Systems, Inc.
Founded
1998
Country
United States
Website
www.clone-systems.com
Product Features
API Management
API Design
No
API Lifecycle Management
No
Access Control
No
Analytics
Yes
Dashboard
No
Developer Portal
No
Testing Management
Yes
Threat Protection
No
Traffic Control
No
Version Control
No
Product Features
Alternatives
Alternatives
No Alternatives