Cobalt strikes a great balance between rigorous security testing and usability. The platform makes it easy to manage findings, track remediation, and collaborate with testers without unnecessary overhead. The quality of the pentesters and the clarity of the findings stand out compared to more traditional, slower approaches. Review collected by and hosted on G2.com.

Some features and workflows could benefit from additional customization, particularly around reporting and integrations. While the platform is strong overall, a bit more flexibility would make it even more effective for different team needs. Review collected by and hosted on G2.com.

Platform, easy of use, Security as a service, good sales contacts, great pen test report Review collected by and hosted on G2.com.

some of the test cases were a bit shallow, not a cheap option Review collected by and hosted on G2.com.

I like that Cobalt performs a thorough pen test for our company across the 2 platforms we offer. They use a shared Slack channel for questions and findings, which I find beneficial. Review collected by and hosted on G2.com.

As with every time limited pen test they don't find 100% of the issues. Their pricing and credit model is a bit confusing. Review collected by and hosted on G2.com.

I use Cobalt for quick external pentests and I really like that it provides immediate reports. Everything works seamlessly; I just have to schedule a pentest and can relax knowing it's handled. The initial setup is extremely easy, I just add the scope and that's it. Review collected by and hosted on G2.com.

I think the pentester quality and the quality of issues could be improved. Review collected by and hosted on G2.com.

Doing all the setup within the portal, and speed of organizing pentest in the background. Review collected by and hosted on G2.com.

For Cobalt no, but pentesters always found the same vulnerabilities every time, even if we marked as false positive. Review collected by and hosted on G2.com.

I really appreciate Cobalt's extensive support from employees when I have issues, as they provide valuable solutions. It makes me feel like I don't have to be a security expert because I have access to people with expertise in that area. Additionally, I found the initial setup to be easy. Review collected by and hosted on G2.com.

nothing Review collected by and hosted on G2.com.

The process is streamlined making scheduling and results very easy. Cost is reasonable, and retesting helps confirm any issues are resolved. Support is easy to reach and specialized. Easy to get started with external scanning, internal also available. The interface is easy to step through, and multiple levels of result reporting. Review collected by and hosted on G2.com.

They could simplify the process for internal scanning. Review collected by and hosted on G2.com.

Easy to start, quite easy to use. The thing I love most about cobalt is the ability to quickly organise a pentest for new releases or changes in product/infrastructure. Review collected by and hosted on G2.com.

Attack surface in real life is pretty useless. DAST functionality and value are also quite questionable, so for me, these things are just marketing. Review collected by and hosted on G2.com.

Ability to launch pentests quickly without unnecessary overhead.

High quality of researchers and relevance of reported vulnerabilities.

Clear testing process and good communication throughout engagements.

The platform facilitates smooth collaboration between internal teams and pentesters.

Reports are well-structured, with clearly defined severity and business impact.

Slack integration and real-time interaction with researchers.

Flexibility in scoping and scheduling tests. Review collected by and hosted on G2.com.

Pricing structure can be less flexible for smaller or ongoing engagements. Review collected by and hosted on G2.com.

The best thing about Cobalt is how it simplifies vulnerability management — everything from scheduling to reviewing findings is super organized. Review collected by and hosted on G2.com.

The reporting and dashboard could be a bit more customizable. It works well, but having more flexibility in filtering or exporting data would make it even better Review collected by and hosted on G2.com.