Best Enterprise Penetration Testing Tools

How Many Penetration Testing Tools Products Does G2 Track?

Total Products under this Category: 200

Category Stats (Nov 2026)

  • Average Rating: 4.64/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: CybaOps (+4.75%) - Among all products in this category, CybaOps recorded the largest rating increase compared to last month

Last updated: November 01, 2026

How Does G2 Rank Penetration Testing Tools Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 3,900+ Authentic Reviews
  • 200+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Penetration Testing Tools

G2 Grid® for Penetration Testing Tools plotting products by satisfaction and market presence

Highlighted products: Pentera, H1 Platform, NodeZero from Horizon3, Cobalt, Synack, Bugcrowd, Edgescan, and Invicti Web + API (formerly Acunetix).

Underlying data: [Grid® JSON](https://www.g2.com/categories/penetration-testing-tools/grids.json?focus%5B%5D=pentera&focus%5B%5D=h1-platform&focus%5B%5D=nodezero-from-horizon3&focus%5B%5D=cobalt-io-cobalt&focus%5B%5D=synack&focus%5B%5D=bugcrowd&focus%5B%5D=edgescan&focus%5B%5D=invicti-web-api-formerly-acunetix&segment=enterprise)

Pentera

Pentera is the category leader for Automated Security Validation, allowing every organization to test with ease the integrity of all cybersecurity layers, unfolding true, current security exposures at any moment, at any scale. Thousands of security professionals and service providers around the world use Pentera to guide remediation and close security gaps before they are exploited. Its customers include Casey's General Stores, Emeria, LuLu International Exchange, IP Telecom PT, BrewDog, City National Bank, Schmitz Cargobull, and MBC Group. Pentera is backed by leading investors such as K1 Investment Management, Insight Partners, Blackstone, Evolution Equity Partners, and AWZ. Visit https://pentera.io for more information.

Average Rating: 4.6/5.0

Total Reviews: 195

How Do G2 Users Rate Pentera?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.4/10)
  • Performance and Reliability: 8.7/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 8.7/10 (Category avg: 9.2/10)
  • Extensibility: 7.4/10 (Category avg: 8.8/10)

Who Is the Company Behind Pentera?

  • Seller: Pentera
  • Company Website:
  • Year Founded: 2015
  • HQ Location: Boston, MA
  • LinkedIn® Page: www.linkedin.com
    460 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Government Administration, Computer & Network Security
  • Company Size: 52% Large, 34% Medium

What Do G2 Reviewers Say About Pentera?

AI-generated summary from verified user reviews

Pros
  • Users love the user-friendly UI of Pentera, which simplifies penetration testing and enhances overall efficiency.
  • Users value the effective vulnerability identification and remediation suggestions, enhancing their overall security posture.
  • Users appreciate the fully automated features of Pentera, noting its quick implementation and user-friendly interface.
  • Users value the responsive customer support of Pentera, enhancing overall satisfaction and efficiency in vulnerability management.
  • Users value the realistic testing capabilities of Pentera, enhancing company network security and response effectiveness.
Cons
  • Users find the reporting inadequate, lacking detail for enterprise-scale insights and missing multilingual support.
  • Users are disappointed with the lack of a robust RBAC system for effective user access control in Pentera.
  • Users desire improvements in handling false positives, but overall satisfaction remains high with current functionalities.
  • Users note that reporting lacks robustness, especially for enterprise-level insights and multilingual support.
  • Users express concerns about the missing features, such as insufficient vulnerabilities, limited RBAC, and lack of translation.

What Are Recent G2 Reviews of Pentera?

H1 Platform

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM) and the only solution provider that pairs the simultaneous trust of the Fortune 500 and the world's largest community of security researchers to secure the AI-native enterprise. The H1 Platform unites agentic AI solutions with security researchers ingenuity to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, Crypto.com, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing.

Average Rating: 4.5/5.0

Total Reviews: 107

How Do G2 Users Rate H1 Platform?

  • Has the product been a good partner in doing business?: 9.0/10 (Category avg: 9.4/10)
  • Performance and Reliability: 8.3/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 10.0/10 (Category avg: 9.2/10)
  • Extensibility: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind H1 Platform?

  • Seller: HackerOne
  • Company Website:
  • Year Founded: 2012
  • HQ Location: San Francisco, California
  • LinkedIn® Page: www.linkedin.com
    7,090 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 47% Large, 34% Medium

What Do G2 Reviewers Say About H1 Platform?

AI-generated summary from verified user reviews

Pros
  • Users highlight the ease of use of H1 Platform, making it simple to manage and track bounty programs effectively.
  • Users highlight the helpful customer service of HackerOne, ensuring effective assistance and smooth platform navigation.
  • Users value the seamless collaboration facilitated by H1 Platform, enhancing communication with security researchers and team members.
  • Users value the enhanced security protection of H1 Platform, facilitating proactive vulnerability management and team collaboration.
  • Users value the exceptional customer support of H1 Platform, enhancing their overall experience and program management.
Cons
  • Users find the complexity issues in triaging and credentials management to be a challenge, impacting overall efficiency.
  • Users note the expensive pricing of H1 Platform, which may challenge smaller organizations despite its value.
  • Users face time management challenges with inconsistent triage speed and quality, impacting overall efficiency on the H1 Platform.
  • Users experience poor customer support with long ticket resolutions and unresolved queries impacting their overall satisfaction.
  • Users find the poor interface design of H1 Platform confusing and difficult to navigate, often missing reports.

What Are Recent G2 Reviews of H1 Platform?

What Are G2 Users Discussing About H1 Platform?

NodeZero from Horizon3

Horizon3's NodeZero® Proactive Security Platform shifts the advantage from attackers to defenders by helping organizations fight AI with AI. It autonomously tests defenses at machine speed, safely uncovering and prioritizing exploitable attack paths across on-premises and virtual infrastructure, cloud and hybrid environments, identity systems, Kubernetes, data infrastructure, APIs, and external assets. NodeZero reveals risks beyond known CVEs, including compromised credentials, exposed data, misconfigurations, weak controls, and risky policies. By safely chaining weaknesses as an attacker would, it shows what can be reached and the potential impact. Teams receive clear remediation guidance, then verify that fixes work, turning security testing into a continuous Hack, Fix, Verify, Repeat loop. Reports provide visibility into test actions, exploit chains, affected assets, and verified remediations, giving teams measurable proof of progress, audit-ready evidence, and greater confidence in their resilience.

Average Rating: 4.7/5.0

Total Reviews: 51

How Do G2 Users Rate NodeZero from Horizon3?

  • Has the product been a good partner in doing business?: 9.8/10 (Category avg: 9.4/10)
  • Performance and Reliability: 9.4/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 9.7/10 (Category avg: 9.2/10)
  • Extensibility: 9.8/10 (Category avg: 8.8/10)

Who Is the Company Behind NodeZero from Horizon3?

  • Seller: Horizon3.ai
  • Company Website:
  • Year Founded: 2019
  • HQ Location: San Francisco, US
  • LinkedIn® Page: linkedin.com
    548 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 42% Medium, 27% Large

What Do G2 Reviewers Say About NodeZero from Horizon3?

AI-generated summary from verified user reviews

Pros
  • Users praise the intuitive vulnerability detection of NodeZero, facilitating easy integration and thorough cybersecurity assessments.
  • Users appreciate the intuitive communication of NodeZero, making it accessible and effective for both technical and nontechnical teams.
  • Users highlight the intuitive interface and thorough capabilities of NodeZero, making it essential for effective cybersecurity.
  • Users value the ease of implementation of NodeZero, finding it simple for both technical and nontechnical staff.
  • Users appreciate the easy integrations of NodeZero, enabling seamless implementation for both technical and non-technical staff.
Cons
  • Users note that the inadequate reporting in NodeZero makes it hard to identify specific machine outcomes.
  • Users find the lack of detailed reporting on machine success and failure a significant drawback of NodeZero.

What Are Recent G2 Reviews of NodeZero from Horizon3?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

Cobalt

Cobalt is the pioneer in pentesting as a service (PTaaS) and a leader in continuous offensive security testing grounded in human expertise. The Cobalt Offensive Security Platform spans the full spectrum of offensive security, from targeted, human-led pentesting to high-frequency, AI-driven autonomous security testing. Only Cobalt brings together the four critical elements of modern offensive security: elite human expertise, a context-aware platform, AI-powered orchestration, and the industry's largest dataset of real-world pentest results. Thousands of customers and hundreds of partners rely on Cobalt and its global network of 500+ vetted security experts to continuously identify, prioritize, and remediate exploitable risk with the speed, flexibility, and precision today's organizations require.

Average Rating: 4.5/5.0

Total Reviews: 184

How Do G2 Users Rate Cobalt?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.4/10)
  • Performance and Reliability: 9.1/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 8.7/10 (Category avg: 9.2/10)
  • Extensibility: 8.5/10 (Category avg: 8.8/10)

Who Is the Company Behind Cobalt?

  • Seller: Cobalt
  • Company Website:
  • Year Founded: 2013
  • HQ Location: San Francisco, California
  • LinkedIn® Page: www.linkedin.com
    597 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, Security Engineer
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 52% Medium, 22% Small

What Do G2 Reviewers Say About Cobalt?

AI-generated summary from verified user reviews

Pros
  • Users value Cobalt's efficient pentesting process with organized dashboards and real-time collaboration, enhancing overall productivity.
  • Users value the quick and responsive customer support of Cobalt, enhancing their testing experience with excellent communication.
  • Users praise the ease of use of Cobalt, highlighting its friendly interface for non-technical resources.
  • Users value the excellent communication from Cobalt's support team, appreciating their responsiveness and timely updates.
  • Users value Cobalt’s real-time, detailed reporting, which provides immediate insights and a streamlined pentesting process.
Cons
  • Users find Cobalt to be expensive compared to competitors, raising concerns over its pricing structure and auto-renewal policy.
  • Users feel that Cobalt has a limited scope of audits, impacting efficiency and overall cybersecurity effectiveness.
  • Users find the lack of detail in test cases leads to confusion and a less satisfactory experience.
  • Users find Cobalt's pricing model confusing and prefer a more straightforward payment structure for services.
  • Users experience inaccuracy in audits, causing missed findings and inefficiencies in the pentesting process of Cobalt.

What Are Recent G2 Reviews of Cobalt?

What Are G2 Users Discussing About Cobalt?

Synack

Synack is a continuous penetration testing platform that combines agentic AI with a global network of vetted security researchers to uncover real, exploitable vulnerabilities across the entire attack surface. Most organizations test only a fraction of what matters. Synack closes that coverage gap—using AI to scale discovery and human expertise to validate real risk. The platform enables enterprises to move from periodic testing to continuous security validation across web applications, APIs, cloud, and infrastructure—prioritizing findings based on what is actually exploitable, not just detected. Synack supports penetration testing, continuous security testing, vulnerability management, and attack surface management in dynamic, cloud-based, and hybrid environments. Founded by former NSA professionals, Synack supports enterprise and public sector organizations where security, compliance, and risk management are mission-critical.

Average Rating: 4.8/5.0

Total Reviews: 21

How Do G2 Users Rate Synack?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.4/10)
  • Performance and Reliability: 9.0/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 10.0/10 (Category avg: 9.2/10)
  • Extensibility: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Synack?

  • Seller: NetSPI
  • Company Website:
  • Year Founded: 2001
  • HQ Location: Minneapolis, MN
  • LinkedIn® Page: www.linkedin.com
    595 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 71% Large, 14% Medium

What Are Recent G2 Reviews of Synack?

What Are G2 Users Discussing About Synack?

Bugcrowd

Bugcrowd frees organizations with a low tolerance for risk from chronic talent shortages, noisy tools that breed false positives, and the fear of critical hidden or emerging vulnerabilities. Our SaaS platform provides access to the unlimited capacity and skills of the global ethical hacker/pentester community for deeper, proactive risk reduction and faster regulatory compliance. With 12+ years of experience and 1200+ customers in every industry (including OpenAI, National Australia Bank, Indeed, USAA, Twilio, and CISA), we know what long-term with crowdsourced security looks like.

Average Rating: 4.3/5.0

Total Reviews: 60

How Do G2 Users Rate Bugcrowd?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.4/10)
  • Performance and Reliability: 8.5/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 8.3/10 (Category avg: 9.2/10)
  • Extensibility: 8.2/10 (Category avg: 8.8/10)

Who Is the Company Behind Bugcrowd?

  • Seller: Bugcrowd
  • Year Founded: 2012
  • HQ Location: San Francisco, CA
  • LinkedIn® Page: www.linkedin.com
    3,858 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 34% Large, 33% Small

What Do G2 Reviewers Say About Bugcrowd?

AI-generated summary from verified user reviews

Pros
  • Users value the high-quality reporting in Bugcrowd, enabling efficient tracking of vulnerabilities and enhanced security posture.
  • Users find Bugcrowd's platform to be easy to use, enhancing their efficiency and overall experience in vulnerability testing.
  • Users value the responsive customer support from Bugcrowd, enhancing their experience with timely assistance and solutions.
  • Users commend Bugcrowd for its consistent and transparent communication, enhancing the overall efficiency of their research experience.
  • Users value the diverse and skilled security research community in Bugcrowd, ensuring high-quality vulnerability findings.
Cons
  • Users express frustration with poor customer support, noting slow response times and inconsistent triaging processes.
  • Users experience slow performance in triage and report validation, leading to frustration and delays in updates.
  • Users experience slow response times and inconsistent triaging, which can lead to frustration and lack of clarity.
  • Users experience inadequate reporting with slow validations and delays, impacting timely resolutions and overall efficiency.
  • Users find the learning curve steep with Bugcrowd, making it challenging for beginners to navigate effectively.

What Are Recent G2 Reviews of Bugcrowd?

Edgescan

What Is Edgescan? Edgescan is a cybersecurity company that helps organizations proactively identify, validate, and prioritize vulnerabilities across their applications, API’s and digital landscape. The company specializes in continuous vulnerability assessment, automated penetration testing, Attack Surface Management and Penetration Testing as a Service (PTaaS). Edgescan also delivers Autonomous Penetration Testing via "Edgescan Atomic". Atomic is an AI powered autonomous penetration testing capability available exclusively to Edgescan customers. Each Atomic Attack Credit provides an autonomous penetration test, allowing organizations to perform an additional autonomous penetration test when required Atomic complements PTaaS by providing another way to assess security as environments evolve. (Supercharge your security with AI) Edgescan combines advanced automation with certified security experts, including professionals holding credentials such as CREST and OSCP, to deliver highly accurate and actionable security testing. This hybrid approach allows organizations to move beyond traditional point-in-time penetration tests and operate a continuous proactive cybersecurity program. The Edgescan platform is designed primarily for web application and API security, enabling organizations to continuously assess their attack surface and identify vulnerabilities throughout the development lifecycle but also delivers “full stack” coverage to detect host layer CVE’s. With a client retention rate of over 90%, Edgescan has built long-term partnerships by delivering measurable improvements in security efficiency, risk visibility, and vulnerability management. Key Features and Capabilities of Edgescan Automated Penetration Testing Edgescan uses intelligent automation to continuously assess applications, APIs, hosts, and cloud environments for vulnerabilities. This enables frequent, scalable security testing across modern and distributed architectures. Human‑Validated Testing Findings are reviewed and manually validated by certified security experts to eliminate false positives and provide deeper insight into real‑world exploitability. Each result is accurate, contextual, and actionable. Penetration Testing as a Service (PTaaS) Edgescan’s PTaaS model extends beyond automated testing by allowing expert testers to focus on vulnerabilities that require human analysis, including: • Business logic flaws • Authentication and authorization weaknesses • Context-dependent exposures • Complex attack chains and privilege escalation paths Cyber Analytics and AI‑Assisted Validation AI-driven analysis enhances detection, verifies exploitability, and increases accuracy. This reduces noise and gives security teams a clearer picture of genuine threats. Integrated Threat Intelligence Edgescan correlates vulnerabilities with real-world threat intelligence, including known exploits and ransomware activity to help organizations prioritize the most dangerous exposures first. Risk‑Based Prioritization Findings are prioritized based on exploitability, severity, threat context, and business impact, ensuring teams focus on the issues that matter most. Primary Value: What Edgescan Solves for Clients Edgescan enables organizations to shift from reactive vulnerability management to a continuous, proactive security model. Traditional scanners and periodic penetration tests frequently produce large volumes of unvalidated findings. This creates noise and forces security teams to spend hours determining which issues are real and critical. Edgescan solves this by combining: Automation for continuous testing Human expertise for validation and complex analysis Cyber analytics and AI for accuracy and prioritization Key Benefits Significant efficiency gains: reducing thousands of hours spent on manual validation. Higher accuracy, thanks to expert‑validated findings and reduced false positives. Clear prioritization, using threat intelligence and ransomware insights to highlight the highest‑risk exposures. Continuous security improvement, enabling rapid detection, faster remediation, and scalable vulnerability management. By unifying automation, human expertise, AI, and threat intelligence, Edgescan empowers organizations to maintain a continuous cybersecurity program that strengthens overall security posture while dramatically reducing operational burden.

Average Rating: 4.6/5.0

Total Reviews: 58

How Do G2 Users Rate Edgescan?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 9.4/10)
  • Performance and Reliability: 8.5/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 9.5/10 (Category avg: 9.2/10)
  • Extensibility: 9.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Edgescan?

  • Seller: Edgescan
  • Company Website:
  • Year Founded: 2017
  • HQ Location: Dublin, Dublin
  • LinkedIn® Page: www.linkedin.com
    88 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 38% Large, 28% Medium

What Do G2 Reviewers Say About Edgescan?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Edgescan, enjoying its user-friendly interface and convenient access to essential information.
  • Users value the near false positive free vulnerability scanning of Edgescan, making web application testing efficient and reliable.
  • Users highly value the fantastic customer support from Edgescan, enhancing their overall experience significantly.
  • Users value the validated, near false positive free vulnerability scanning of Edgescan, enhancing their testing experience significantly.
  • Users appreciate the user-friendly console of Edgescan, as it offers easy access and comprehensive functionality for managing vulnerabilities.
Cons
  • Users find the complex UI of Edgescan challenging, leading to inefficiencies and difficulties in task navigation.
  • Users find the limited customization for hosts and filtering frustrating, impacting their ability to adapt to changes.
  • Users find the poor interface design of Edgescan frustrating, hindering efficient navigation and task completion.
  • Users experience slow performance with Edgescan, as scans can take longer due to thorough validation processes.
  • Users find the user interface challenging to navigate, leading to delays and difficulty performing common tasks.

What Are Recent G2 Reviews of Edgescan?

What Are G2 Users Discussing About Edgescan?

Invicti Web + API (formerly Acunetix)

Invicti Web + API (formerly Acunetix) is a dynamic application security testing (DAST) solution that helps security and development teams find and validate exploitable vulnerabilities across web applications and APIs. Built on the same Acunetix technology and expertise customers already know, Invicti Web + API combines fast, accurate scanning with proof-based validation, modern application coverage, and intelligent automation. With Invicti Web + API, teams can: - Discover and test vulnerabilities across websites, web applications, APIs, single-page applications, and modern JavaScript frameworks - Validate exploitable vulnerabilities with proof-based scanning to reduce false positives and manual verification - Test REST, SOAP, and GraphQL APIs, including complex and stateful application workflows - Integrate security testing into CI/CD, issue tracking, and development workflows so validated findings reach the teams responsible for remediation - Automate recurring application security testing across development and production environments Invicti Web + API serves as the foundation of Invicti’s solution portfolio, extending proven web and API security into the broader Invicti AppSec platform and its agentic pentesting capabilities.

Average Rating: 4.1/5.0

Total Reviews: 100

How Do G2 Users Rate Invicti Web + API (formerly Acunetix)?

  • Has the product been a good partner in doing business?: 8.2/10 (Category avg: 9.4/10)
  • Performance and Reliability: 8.1/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 8.6/10 (Category avg: 9.2/10)
  • Extensibility: 7.4/10 (Category avg: 8.8/10)

Who Is the Company Behind Invicti Web + API (formerly Acunetix)?

  • Seller: Invicti Security
  • Company Website:
  • Year Founded: 2018
  • HQ Location: Austin, Texas
  • LinkedIn® Page: www.linkedin.com
    326 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 40% Large, 34% Medium

What Do G2 Reviewers Say About Invicti Web + API (formerly Acunetix)?

AI-generated summary from verified user reviews

Pros
  • Users value the rapid and precise vulnerability detection in Invicti Web + API, enhancing security for their applications.
  • Users commend the ease of use of Invicti Web + API, appreciating its intuitive interface and seamless integration.
  • Users appreciate the robust security features of Invicti Web + API, ensuring thorough protection for web applications.
  • Users appreciate the effective vulnerability identification capabilities of Invicti, enhancing web application security significantly.
  • Users value the accuracy of results from Invicti Web + API, ensuring reliable vulnerability assessments for web applications.
Cons
  • Users find the pricing of Invicti Web + API to be expensive, limiting accessibility for smaller teams and projects.
  • Users find the complexity in setup and configurations of Invicti Web + API challenging, especially for new users.
  • Users find the complex setup of Invicti Web + API challenging, especially for first-time configurations and integrations.
  • Users experience slow scanning that can hinder normal workflows and complicate the use of the tool.
  • Users find that difficult customization can hinder the integration of Invicti Web + API, requiring extensive technical knowledge.

What Are Recent G2 Reviews of Invicti Web + API (formerly Acunetix)?

What Are G2 Users Discussing About Invicti Web + API (formerly Acunetix)?

Astra Pentest

Astra Security is a leading continuous penetration testing platform that combines AI-powered autonomous pentesting with certified expert-led assessments. Powered by Attack AI, trained on 6.8M+ security findings and insights from 5,000+ real-world pentests. Astra deploys intelligent agents that continuously discover, validate, prioritize, and help remediate vulnerabilities at scale. While AI handles speed and scale, Astra’s certified security experts focus on what automation alone cannot: complex business logic flaws, multi-step attack chains, advanced exploit paths, and emerging AI/LLM-specific threats. Built for modern engineering teams, Astra integrates directly into CI/CD workflows, enabling continuous security validation between releases instead of relying on outdated annual pentests. The platform delivers comprehensive Autonomous Pentest powered by AI agents, DAST vulnerability scanner and human-driven pentests across web apps, AI/LLMs, mobile apps, APIs, cloud infrastructure. Astra is CREST-accredited, CERT-IN empaneled, and a PCI ASV-certified vendor. Our team also led the development of the OWASP APTS framework, helping shape the industry standard for continuous security testing. Today, 1,500+ organizations across 70+ countries trust Astra Security, including Ford, Loom, CompTIA, Hitachi, HackerRank, and OLX.

Average Rating: 4.7/5.0

Total Reviews: 264

G2 Deal: For G2 users: 10% off across all pentest plans

Avail Astra Pentest at 10% off, our comprehensive pentest suite scans for 8000+ security tests including OWASP Top 10, SANS 25, known CVEs & security best practices. This offer is exclusive to G2 users!

Price: ~~$5999~~ → $5400

View this exclusive G2 deal

How Do G2 Users Rate Astra Pentest?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.4/10)
  • Performance and Reliability: 9.0/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 9.0/10 (Category avg: 9.2/10)
  • Extensibility: 8.1/10 (Category avg: 8.8/10)

Who Is the Company Behind Astra Pentest?

  • Seller: ASTRA IT, Inc.
  • Company Website:
  • Year Founded: 2018
  • HQ Location: Bengaluru, IN
  • LinkedIn® Page: www.linkedin.com
    154 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 68% Small, 27% Medium

What Do G2 Reviewers Say About Astra Pentest?

AI-generated summary from verified user reviews

Pros
  • Users value the responsive customer support of Astra Pentest, facilitating a smooth and efficient penetration testing process.
  • Users appreciate Astra Pentest's thorough vulnerability detection, praising its clarity, responsiveness, and ease of management.
  • Users appreciate the ease of use of Astra Pentest, enjoying a smooth onboarding process and intuitive interface.
  • Users commend Astra Pentest for its thorough and responsive pentesting efficiency, simplifying vulnerability management with clear guidance.
  • Users value Astra Pentest's thorough vulnerability identification, enjoying clear findings and effective collaboration for easy remediation.
Cons
  • Users express frustration with poor customer support, highlighting delays and lack of transparency in tracking issues.
  • Users note a poor interface design in Astra Pentest, making usability and navigation more challenging than necessary.
  • Users often face slow performance issues, particularly with report speed and initial setup complications during pentesting.
  • Users note that the UX could be improved, particularly regarding the interface's intuitiveness and false positives during scans.
  • Users experience false positives with Astra Pentest, leading to additional clarification and verification time.

What Are Recent G2 Reviews of Astra Pentest?

What Are G2 Users Discussing About Astra Pentest?

Burp Suite

Burp Suite is a complete ecosystem for web application and API security testing, combining two products: Burp Suite DAST - a best-of-breed, precision DAST solution that automates runtime testing, and Burp Suite Professional - the industry-standard toolkit for manual penetration testing. Developed by PortSwigger, more than 85,000 security professionals rely on Burp Suite to find, verify, and understand vulnerabilities across complex modern web applications. Burp Suite DAST is PortSwigger’s enterprise dynamic application security testing (DAST) solution, purpose-built for continuous, automated scanning of web applications and APIs. Unlike many DAST solutions, which are part of a wider AST offering, Burp Suite DAST is not a bolt-on tool - instead it’s precision-built from over 20 years of dynamic testing experience. Burp Suite DAST reveals the runtime issues that static analysis tools miss, such as authentication flaws, configuration drift, and chained vulnerabilities. Built on the same proprietary scanning engine that powers Burp Suite Professional, it delivers precise, low-noise results that security teams trust. Key capabilities of Burp Suite DAST include: Continuous, automated scanning of web applications and APIs, integration with CI/CD pipelines and vulnerability management tools, flexible deployment across cloud, and on-premise environments, shared scanning logic and configurations between automated and manual testing, accurate, low-noise detection informed by PortSwigger Research. Burp Suite Professional complements DAST with deep manual testing capability. It’s the industry-standard toolkit for penetration testers, consultants, and AppSec engineers who need complete insight and flexibility when validating or exploring vulnerabilities. Findings discovered by DAST can be investigated and verified in Burp Suite Professional, ensuring every result is accurate, contextual, and actionable. Together, Burp Suite DAST and Burp Suite Professional create a unified ecosystem that delivers automation at breadth and manual depth where it counts. Burp Suite is built for AppSec teams who need scalable, trustworthy coverage across web and API environments, enabling a seamless handoff between automated and manual testing.

Average Rating: 4.8/5.0

Total Reviews: 134

How Do G2 Users Rate Burp Suite?

  • Has the product been a good partner in doing business?: 9.7/10 (Category avg: 9.4/10)
  • Performance and Reliability: 8.8/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 8.7/10 (Category avg: 9.2/10)
  • Extensibility: 8.9/10 (Category avg: 8.8/10)

Who Is the Company Behind Burp Suite?

Who Uses This Product?

  • Who Uses This: Cyber Security Analyst
  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 41% Medium, 33% Small

What Do G2 Reviewers Say About Burp Suite?

AI-generated summary from verified user reviews

Pros
  • Users enjoy the user-friendly interface of Burp Suite, making navigation and analysis straightforward for all skill levels.
  • Users highlight the user-friendly interface of Burp Suite, making it easy to navigate and utilize effectively.
  • Users value the deep automation and manual testing capabilities of Burp Suite for effective security assessments.
  • Users appreciate the control and visibility Burp Suite offers, with powerful tools for effective web application testing.
  • Users praise Burp Suite for its clear, user-friendly interface that simplifies web application penetration testing for both beginners and experts.
Cons
  • Users find Burp Suite to be expensive, particularly for the professional version, which may limit accessibility for some users.
  • Users report slow performance with Burp Suite, particularly on lower-end systems during extensive scanning tasks.
  • Users find the steep learning curve of Burp Suite challenging, especially beginners navigating its complex features and tools.
  • Users find the steep learning curve in Burp Suite challenging, particularly for beginners adjusting to its complex setup.
  • Users find the limited customization in Burp Suite restricts exploration, especially for beginners and independent learners.

What Are Recent G2 Reviews of Burp Suite?

What Are G2 Users Discussing About Burp Suite?

Invicti

Invicti (formerly known as Netsparker) is an enterprise application and API security testing platform that helps organizations secure thousands of web applications and APIs at scale while dramatically reducing the risk of attack. Combining advanced DAST and IAST capabilities in a single platform, Invicti enables security teams to continuously identify, prioritize, and remediate vulnerabilities across complex modern environments with confidence and automation. With Invicti, security teams can: - Automate application security testing workflows and save hundreds of hours every month - Discover and secure all web applications and APIs, including forgotten, unmanaged, and shadow assets - Deliver actionable, developer-friendly feedback that helps teams remediate vulnerabilities faster and build more secure code over time - Reduce false positives with proof-based scanning technology that validates exploitable vulnerabilities - Scale application security programs across large enterprises without slowing development teams - Integrate security seamlessly into existing DevSecOps and CI/CD workflows Built for organizations with the most demanding security requirements, Invicti empowers teams to confidently secure their entire attack surface with accuracy, scalability, and automation.

Average Rating: 4.5/5.0

Total Reviews: 69

How Do G2 Users Rate Invicti?

  • Has the product been a good partner in doing business?: 9.6/10 (Category avg: 9.4/10)
  • Performance and Reliability: 9.1/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 9.7/10 (Category avg: 9.2/10)
  • Extensibility: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind Invicti?

  • Seller: Invicti Security
  • Company Website:
  • Year Founded: 2018
  • HQ Location: Austin, Texas
  • LinkedIn® Page: www.linkedin.com
    326 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 46% Large, 29% Medium

What Do G2 Reviewers Say About Invicti?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Invicti, highlighting its quick setup and straightforward report generation.
  • Users value the effective scanning technology of Invicti, enabling accurate identification of vulnerabilities and streamlined workflows.
  • Users value the accuracy and integration capabilities of Invicti, enhancing efficiency and simplifying reporting processes.
  • Users appreciate the well-formatted and easy-to-read reports from Invicti, simplifying certification processes significantly.
  • Users value the super accurate vulnerability detection of Invicti, enhancing their security workflows efficiently.
Cons
  • Users find the customer support inadequate, struggling with timely responses and effective solutions to issues.
  • Users experience slow performance during scans and setup, which affects their overall satisfaction with Invicti.
  • Users experience slow scanning issues with Invicti, affecting efficiency despite good support and solid performance once set up.
  • Users face API scanning issues with Invicti, limiting its effectiveness for their specific needs despite good support.
  • Users find the complex setup to be overwhelming initially, impacting the ease of using Invicti effectively.

What Are Recent G2 Reviews of Invicti?

What Are G2 Users Discussing About Invicti?

Pentest-Tools.com

Vulnerability detection | Autonomous pentesting | Human expertise Built by offensive security practitioners, Pentest-Tools.com gives security teams a unified place to test their defenses continuously, go deeper when needed, and prove what needs to be fixed. Pentest-Tools.com covers multiple classes of assets, from web applications to network and cloud infrastructures, with daily detection and exploitation updates. Experienced offensive security professionals, including our customers and our own services team, constantly battle-test it across numerous engagements. Their feedback helps us keep improving the product so it delivers: ✔️ a low false positive rate ✔️ rich evidence, including screenshots, attack replay, data snippets, and more ✔️ detailed, customizable reporting Behind all of this, our vulnerability research team proactively looks for new security issues in widely used software and explores attack techniques, using them to enrich our exploit database and vulnerability feed. Unlike vulnerability scanners that primarily stop at detection, or testing approaches built around a single level of depth, Pentest-Tools.com lets teams match testing depth to the situation. Security teams can: ✔️ control what gets tested, how & when with deterministic Scanning & Validation ✔️ investigate web apps on-demand with autonomous AI Pentests ✔️ bring in human-led Offensive Security Services when business context, independent attestation, or custom reporting matter. As the target or situation changes, internal security teams can move between these testing modes without changing vendors or breaking their workflow.

Average Rating: 4.8/5.0

Total Reviews: 110

How Do G2 Users Rate Pentest-Tools.com?

  • Has the product been a good partner in doing business?: 9.5/10 (Category avg: 9.4/10)
  • Performance and Reliability: 8.9/10 (Category avg: 9.2/10)
  • Vulnerability Scan: 9.2/10 (Category avg: 9.2/10)
  • Extensibility: 6.9/10 (Category avg: 8.8/10)

Who Is the Company Behind Pentest-Tools.com?

Who Uses This Product?

  • Who Uses This: CEO
  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 67% Small, 19% Medium

What Do G2 Reviewers Say About Pentest-Tools.com?

AI-generated summary from verified user reviews

Pros
  • Users commend the ease of use of Pentest-Tools.com, appreciating its straightforward setup and user-friendly features.
  • Users value the automation of scans on Pentest-Tools.com, enabling efficient and reliable vulnerability management with minimal manual effort.
  • Users commend the exceptional customer support from Pentest-Tools.com, highlighting their responsiveness and willingness to assist.
  • Users value the efficiency of Pentest-Tools.com, appreciating its comprehensive and user-friendly penetration testing capabilities.
  • Users appreciate the easy scheduling features of Pentest-Tools.com, significantly streamlining their vulnerability management process.
Cons
  • Users face difficult customization in Pentest-Tools.com due to limited report editing and template options, hindering flexibility.
  • Users feel the limited features of Pentest-Tools.com hinder report customization and timely scan test reports.
  • Users note that slow scanning can hinder efficiency, complicating the user experience with Pentest-Tools.com.
  • Users find the manual work required for complex findings somewhat annoying, especially when dealing with numerous assets.
  • Users find the interface confusing, wishing for more intuitive navigation and better integration capabilities.

What Are Recent G2 Reviews of Pentest-Tools.com?

What Are G2 Users Discussing About Pentest-Tools.com?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated