Bright Security Reviews & Product Details - Page 2

Technical Support

Options for Authenticated Scan

Coverage Review collected by and hosted on G2.com.

Nothing specific but pointing out the overall market problem that DAST scans struggle with Authenticated scans running smoothly because of complex Auth flows like SSO, oAuth and of course the MFA conf options to be configured within any DAST tool Review collected by and hosted on G2.com.

Working as a consultant, one has to find the best option possible to clients, so I will divide them in categories:

Team support - Bright Customer Support and Technical team are outstanding, they fully dive-in since step 1 and guide you to do everything, giving their insights and helping in every integration, step and training process. It made it ideal in my role because I could rely on them to help me give a better end result to our client. Review collected by and hosted on G2.com.

I don't have any negative commentary, as they followed through with all the needs and tasks. Review collected by and hosted on G2.com.

Were able to find vulnerabilities which other DASTs couldn't

Different authentication methods are supported and can be configured in a convenient way

Good support, very helpful and make sure every issue is being solved Review collected by and hosted on G2.com.

Crawling and scans can sometimes take long time. Review collected by and hosted on G2.com.

It helps to improve API security and provides good vulnerability assessment Review collected by and hosted on G2.com.

hard for the dev team lo learn hot to use Review collected by and hosted on G2.com.

It is a general wisdom that DAST works starting at the Build phase, no later. Yet Bright Secuirty enables DAST as early as at Unit/Programming phase. It is a Shift-Left implementation for DAST in its best. Bright enables developers to run DAST at the earliest phase, when remediation is the least expensive and the easiest. DevOps personnel can use Bright’s DAST as often as necessary until it is ensured that the application if vulnerability-free. Review collected by and hosted on G2.com.

Bright has a complete set of DAST capabilities, including – we should underscore it – an API Secuirty Testing. We would only wish only that Bright, as vendor, added to its portfolio some sister-technologies, such as SCA and SAST Review collected by and hosted on G2.com.

Testing & remediation guidelines

Increased velocity of releases

Iterative scanning in SDLC

Minimal false positives

Depending on the framework, we can cover OWASP top 10, OWASP API top 10, MITRE 25, etc. at the unit testing level

Automatically receive remediation suggestions Review collected by and hosted on G2.com.

Difficulty performing exclusions in the crawler Review collected by and hosted on G2.com.

Coupled with precise vulnerability detection and comprehensive reporting, the platform offers streamlined automation of application security testing and scalable solutions suitable for businesses of all sizes. Review collected by and hosted on G2.com.

Users may need time to become proficient in using all the features effectively. Perhaps having instructional classes and explanatory videos would make things easier. Review collected by and hosted on G2.com.

Broad testing coverage, business logic vulnerabilities including LLM testing, simplified configurations,

fast scans, efficient support. Review collected by and hosted on G2.com.

API security needs some improvements in schema handling to become more efficient and add new authentication objects. Review collected by and hosted on G2.com.

Complete platform for DAST. With good false-positive accuracy.

I also liked the amount of configurations we can make.

Among other DAST tools I've used, I prefer this one.

I recommend. Review collected by and hosted on G2.com.

Due to so many configurations, handling may be a little more difficult for less experienced analysts. It would be interesting to have more pre-determined settings Review collected by and hosted on G2.com.

It is a solution that consistently introduces new features ahead of other DAST solutions. It has recently announced integrations with two SAST solutions (correlates SAST and DAST) and one API security solution.

It offers the possibility of integration in various phases of the SDLC, including the early stages.

I know that some new features were implemented because Bright listens to its customers' needs. Review collected by and hosted on G2.com.

Some configurations settings are not so easy to find, especially when you are just starting to use Bright. Review collected by and hosted on G2.com.