I really appreciate the quality of researchers on the Cobalt platform, which helps us find hidden vulnerabilities missed by our internal security team. The penetration testers provide weekly updates on tests and deliver clean, clear reports on each detected vulnerability. These reports are easily understandable for developers and assist in fixing vulnerabilities. The collaborative environment with the Tester and Project Manager makes support feel much more effective, allowing real-time discussions on the flow of testing. The pricing is also lesser than other providers without compromising quality, which is amazing. The initial setup was incredibly easy, like a cakewalk. Review collected by and hosted on G2.com.

I don't have any thing to dislike about cobalt. Till now , everything is amazing for us. Review collected by and hosted on G2.com.

What I like most about Cobalt is how simple and fast it makes security testing. It connects you with skilled testers on demand, which helps you identify issues quickly and fix them sooner. Overall, it feels more flexible and easier to work with than traditional methods. Review collected by and hosted on G2.com.

Some more UI-friendly tools are needed to provide a more user-friendly experience. Review collected by and hosted on G2.com.

I like that Cobalt follows the timelines and keeps the communication going in every aspect. I also appreciate that we don't have to worry much about the tests. We just provide the setup and they take care of everything else. The initial setup is easy, and the portal has relevant questions to be responded. Review collected by and hosted on G2.com.

One point I feel like the old/previous issues should be tested with the new tests and update their status as well. Review collected by and hosted on G2.com.

Instead of waiting for a final report, you see vulnerabilities in the dashboard the moment the testers find them. You can chat directly with the pentesters via the platform or Slack to ask questions while they are still active. Review collected by and hosted on G2.com.

The experience can be a "luck of the draw." While all are vetted, sometimes one test was handled by a world-class expert, while the next felt like a "junior" tester who relied too much on automated tools and missed complex logic flaws. Review collected by and hosted on G2.com.

I like Cobalt's bug bounty and pentesting services, as it's a mature platform that helps resolve potential vulnerabilities and hardens our architecture. I'm impressed with how fast Cobalt Strike and the pentest services launch with the core team of specialists. I also appreciate the agile pentesting, which helps resolve issues during the CI/CD process. Additionally, the initial setup of Cobalt was pretty fast to deploy and launch. Review collected by and hosted on G2.com.

I don't like how Cobalt often either overscopes or underscopes the audits, which ends up causing a loss of credits. If there could be a better way of scoping just right, it would help improve efficiency. Review collected by and hosted on G2.com.

Cobalt provides an excellent balance of flexibility and expertise in penetration testing. I like how their platform makes it easy to track findings, communicate directly with testers, and manage retesting. The talent and professionalism of their pentesters stand out—they deliver actionable results, not just reports. The continuous visibility into progress and remediation guidance is a huge value add. Review collected by and hosted on G2.com.

The only drawback is that scheduling can sometimes take longer than expected, especially for retesting or specialized scopes. While the platform is solid, the interface could be a bit more intuitive for tracking test progress and filtering findings. These are minor compared to the overall value Cobalt provides, but improvements here would make the experience even smoother. Review collected by and hosted on G2.com.

The team at Cobalt are responsive. We have used their Penetration Testing Services on multiple occasions and across multiple testing requirements. The tool acts like a portal where we can communicate directly with the testers as well as provide updates on remediation activities on findings.

Cobalt is easy to use and coordinate.

Implementing Cobalt through our IAM tool was seamless without any "show-stopping" issues. Review collected by and hosted on G2.com.

We have seen no downsides with the use of Cobalt. Review collected by and hosted on G2.com.

Cobalt provides an easy-to-use interface and straightforward implementation for penetration testing. Their customer support is highly responsive, with excellent engagement from the customer success team. The platform also offers strong integration capabilities for ticket creation, allowing penetration test findings to be tracked efficiently with clearly defined severity and criticality levels. For past few years we are using Cobalt as our penetration testing vendor. Review collected by and hosted on G2.com.

Takes time to complete the tasks and can be improved Review collected by and hosted on G2.com.

It’s easy to use, and they offer a strong support system when you need help. Review collected by and hosted on G2.com.

The credit system they use is a little confusing to understand at first, and it took me some time to figure out how it works. Review collected by and hosted on G2.com.

Our organisation been using cobalt for about 3 hrs for application security external pentesting. The features which are best are:

- Easy and indefinite access of reports that available.

- Amazing customer support that they provide to streamline the entire process

- User Interface is very beginner friendly make it easy to integrate or start any new intiative.

- Our organization uses this very frequent for getting the external pentesting done.

- One of the best part is cobalt pentesting team provides detailled documentation and steps for any vulnerabilities that are identified. This makes the process very smooth and triaging becomes very easy. Review collected by and hosted on G2.com.

Cobalt credits are bit costly, which makes it difficult if you have very scope of applications. Review collected by and hosted on G2.com.