Average Ratings 0 Ratings
Average Ratings 6 Ratings
Similar Products
-
Aikido SecurityAikido is the all-in-one security platform for development teams to secure their complete stack, from code to cloud. Aikido centralizes all code and cloud security scanners in one place. Aikido offers a range of powerful scanners including static code analysis (SAST), dynamic application security testing (DAST), container image scanning, and infrastructure-as-code (IaC) scanning. Aikido integrates AI-powered auto-fixing features, reducing manual work by automatically generating pull requests to resolve vulnerabilities and security issues. It also provides customizable alerts, real-time vulnerability monitoring, and runtime protection, enabling teams to secure their applications and infrastructure seamlessly.
-
ParasoftParasoft's mission is to provide automated testing solutions and expertise that empower organizations to expedite delivery of safe and reliable software. A powerful unified C and C++ test automation solution for static analysis, unit testing and structural code coverage, Parasoft C/C++test helps satisfy compliance with industry functional safety and security requirements for embedded software systems.
-
Rocket z/Assure VAPYour mission-critical systems carry the weight of your entire organization. Protecting them shouldn't leave you guessing about hidden vulnerabilities or compliance risks. Rocket® z/Assure™ Vulnerability Analysis Program (VAP) is a specialized mainframe security solution built to proactively scan and safeguard your most valuable environments. By identifying system-level risks before they become active threats, we partner with you to ensure your infrastructure remains locked down, resilient, and fully compliant. We understand the responsibility of managing enterprise security, and our tool gives you the exact insights you need to confidently eliminate weak points. Key benefits for your security team: - Identify and resolve hidden vulnerabilities with deep, automated scanning. - Protect your mission-critical data from evolving external and internal threats. - Streamline compliance reporting with clear, actionable security insights. Take control of your mainframe security. Partner with Rocket Software to protect your digital foundation today.
-
TrustInSoft AnalyzerTrustInSoft commercializes a source code analyzer called TrustInSoft Analyzer, which analyzes C and C++ code and mathematically guarantees the absence of defects, immunity of software components to the most common security flaws, and compliance with a specification. The technology is recognized by U.S. federal agency the National Institute of Standards and Technology (NIST), and was the first in the world to meet NIST’s SATE V Ockham Criteria for high quality software. The key differentiator for TrustInSoft Analyzer is its use of mathematical approaches called formal methods, which allow for an exhaustive analysis to find all the vulnerabilities or runtime errors and only raises true alarms. Companies who use TrustInSoft Analyzer reduce their verification costs by 4, efforts in bug detection by 40, and obtain an irrefutable proof that their software is safe and secure. The experts at TrustInSoft can also assist clients in training, support and additional services.
-
Astra PentestAstra's Pentest is a comprehensive solution for penetration testing. It includes an intelligent vulnerability scanner and in-depth manual pentesting. The automated scanner performs 10000+ security checks, including security checks for all CVEs listed in the OWASP top 10 and SANS 25. It also conducts all required tests to comply with ISO 27001 and HIPAA. Astra provides an interactive pentest dashboard which allows users to visualize vulnerability analysis, assign vulnerabilities to team members, collaborate with security experts, and to collaborate with security experts. The integrations with CI/CD platforms and Jira are also available if users don't wish to return to the dashboard each time they want to use it or assign a vulnerability for a team member.
-
JosysJosys is an AI-native identity security and governance platform built for the age of enterprise AI. As AI adoption accelerates, identity has become the fastest-growing attack surface and the hardest to govern. Josys discovers, governs, and secures every identity in the enterprise, human, machine, and AI agent, across every application. Its policy-led model lets security and IT teams set access policies once and enforce them autonomously: risk gets surfaced, access gets controlled, and identity threats get remediated in real time, with no manual oversight required. Over 1,000 organizations and MSPs worldwide trust Josys to turn identity from a liability into an autonomously governed advantage. Learn more at josys.com.
-
GearsetGearset is a full‑featured Salesforce DevOps solution built for the enterprise, giving teams the tools to adopt best practices across every stage of the DevOps lifecycle. From metadata and CPQ deployments to CI/CD, testing, code analysis, sandbox seeding, backups, archiving, and observability, Gearset gives teams unmatched insight and control over their Salesforce workflows. Over 3,000 organizations — including names like McKesson and IBM — rely on Gearset to deliver with security and scale in mind. With advanced governance, detailed audit trails, SOX/ISO/HIPAA support, multi‑team pipelines, integrated security checks, and adherence to ISO 27001, SOC 2, GDPR, CCPA/CPRA, and HIPAA, Gearset combines enterprise‑ready compliance with rapid onboarding and an intuitive interface — all in one platform. Leading firms in finance, healthcare, and tech trust Gearset to power their DevOps initiatives without adding complexity.
-
Virtuoso QAVirtuoso QA is an AI-native test automation solution built to streamline and scale enterprise quality assurance processes. It allows users to author tests in natural language, making it accessible for both technical and non-technical team members. The platform leverages self-healing AI to automatically adapt to changes in applications, reducing test flakiness and maintenance overhead. With features like live authoring, real-time execution, and automated diagnostics, teams can quickly identify and resolve issues. Virtuoso QA supports continuous testing across multiple browsers, devices, and environments, ensuring comprehensive test coverage. It integrates seamlessly with popular tools such as Jira, Jenkins, Azure DevOps, and BrowserStack, enabling smooth CI/CD workflows. The platform also provides detailed analytics and dashboards to track performance and optimize testing strategies. By automating test generation and execution, it significantly reduces manual effort and accelerates release cycles. Virtuoso QA empowers organizations to deliver high-quality software faster and more reliably.
-
MuukTestYou know that you could be testing more to catch bugs earlier, but QA testing can take a lot of time, effort and resources to do it right. MuukTest can get growing engineering teams up to 95% coverage of end-to-end tests in just 3 months. Our QA experts create, manage, maintain, and update E2E tests on the MuukTest Platform for your web, API, and mobile apps at record speed. We begin exploratory and negative tests after achieving 100% regression coverage within 8 weeks to uncover bugs and increase coverage. The time you spend on development is reduced by managing your testing frameworks, scripts, libraries and maintenance. We also proactively identify flaky tests and false test results to ensure the accuracy of your tests. Early and frequent testing allows you to detect errors in the early stages your development lifecycle. This reduces the burden of technical debt later on.
-
Criminal IPCriminal IP is a cyber threat intelligence search engine that detects vulnerabilities in personal and corporate cyber assets in real time and allows users to take preemptive actions. Coming from the idea that individuals and businesses would be able to boost their cyber security by obtaining information about accessing IP addresses in advance, Criminal IP's extensive data of over 4.2 billion IP addresses and counting to provide threat-relevant information about malicious IP addresses, malicious links, phishing websites, certificates, industrial control systems, IoTs, servers, CCTVs, etc. Using Criminal IP’s four key features (Asset Search, Domain Search, Exploit Search, and Image Search), you can search for IP risk scores and vulnerabilities related to searched IP addresses and domains, vulnerabilities for each service, and assets that are open to cyber attacks in image forms, in respective order.
Description
Explore security concerns within your applications and systems using our platform, which provides in-depth information about each vulnerability, including its severity, supporting evidence, and associated non-compliance standards, along with recommended fixes. You can effortlessly assign team members to address reported vulnerabilities and monitor their progress. Additionally, you can request retesting to verify that vulnerabilities have been effectively resolved. Access your organization's remediation rate at any time to stay informed about your security posture. By integrating our DevSecOps agent into your CI pipelines, you can ensure that your applications are devoid of vulnerabilities prior to deployment, thus minimizing operational risks by halting the build process when security policies are violated. This proactive approach not only enhances the security of your systems but also fosters a culture of continuous improvement in security practices across your organization.
Description
Invicti (formerly Netsparker) dramatically reduces your risk of being attacked. Automated application security testing that scales like none other. Your team's security problems grow faster than your staff. Security testing automation should be integrated into every step in your SDLC. Automate security tasks to save your team hundreds of hours every month. Identify the critical vulnerabilities and then assign them to remediation. Whether you are running an AppSec, DevOps or DevSecOps program, help security and development teams to get ahead of their workloads. It's difficult to prove that you are doing everything possible to reduce your company's risk without full visibility into your apps, vulnerabilities and remediation efforts. You can find all web assets, even those that have been forgotten or stolen. Our unique dynamic + interactive (DAST+ IAST) scanning method allows you to scan the corners of your apps in a way that other tools cannot.
API Access
Has API
No
API Access
Has API
Yes
Integrations
Axonius
No
BambooHR
No
Centraleyezer
No
CircleCI
No
Dradis
No
GitHub
No
GitLab
No
Jira
No
Kondukto
No
Maverix
No
Integrations
Axonius
Yes
BambooHR
Yes
Centraleyezer
Yes
CircleCI
Yes
Dradis
Yes
GitHub
Yes
GitLab
Yes
Jira
Yes
Kondukto
Yes
Maverix
Yes
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Fluid Attacks
Founded
2001
Country
United States
Website
fluidattacks.com
Vendor Details
Company Name
Invicti Security
Founded
2018
Country
United States
Website
www.invicti.com
Product Features
Automated Testing
Hierarchical View
No
Move & Copy
No
Parameterized Testing
No
Requirements-Based Testing
No
Security Testing
No
Supports Parallel Execution
No
Test Script Reviews
No
Unicode Compliance
No
Static Application Security Testing (SAST)
Application Security
No
Dashboard
No
Debugging
No
Deployment Management
No
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
No
Source Code Scanning
No
Vulnerability Scanning
No
Product Features
Application Security
Analytics / Reporting
Yes
Open Source Component Monitoring
No
Source Code Analysis
No
Third-Party Tools Integration
Yes
Training Resources
Yes
Vulnerability Detection
Yes
Vulnerability Remediation
Yes
Automated Testing
Hierarchical View
No
Move & Copy
No
Parameterized Testing
No
Requirements-Based Testing
No
Security Testing
No
Supports Parallel Execution
No
Test Script Reviews
No
Unicode Compliance
No
Computer Security
Anti Spam
No
Antivirus
No
Audit Trail
No
Compliance Management
No
Database Security Audit
Yes
File Access Control
No
Financial Data Protection
No
Maintenance Scheduling
Yes
Real Time Monitoring
Yes
Security Event Log
No
Virus Definition Update
No
Vulnerability Protection
Yes
Cybersecurity
AI / Machine Learning
No
Behavioral Analytics
No
Endpoint Management
No
IOC Verification
Yes
Incident Management
No
Tokenization
No
Vulnerability Scanning
Yes
Whitelisting / Blacklisting
No
IT Security
Anti Spam
No
Anti Virus
No
Email Attachment Protection
No
Event Tracking
No
IP Protection
No
Internet Usage Monitoring
No
Intrusion Detection System
No
Spyware Removal
No
Two-Factor Authentication
No
Vulnerability Scanning
Yes
Web Threat Management
No
Web Traffic Reporting
No
Vulnerability Management
Asset Discovery
Yes
Asset Tagging
Yes
Network Scanning
No
Patch Management
No
Policy Management
No
Prioritization
Yes
Risk Management
Yes
Vulnerability Assessment
Yes
Web Scanning
Yes
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
No
Compliance Monitoring
No
Continuous Monitoring
No
Defect Tracking
No
Interactive Scanning
No
Logging and Reporting
No
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
No
Threat Intelligence
No
Web Inspection
No
