Cobalt is a cost effective solution for penetration testing. Over the years, I have spoken to many firms and vendors regarding penetration testing, and the range of cost is pretty large. I have used several of them, and it is often hard to determine if you are getting the true value with higher cost. With Cobalt, they have a pool of researchers that could be working on your project. The benefit is that you can have a different ones if you prefer every year, which could potentially find new issues since they might have approaches. Additionally, the overhead of running a pentest is pretty low as there is no weekly progress meetings etc. Overall, I have been a happy customer. Review collected by and hosted on G2.com.

The effectiveness of the pentest will be depended on the researcher to certain extend. If you don't know the researcher, you might want to do some research but the public info can be limited. Another concern is tgat if they are testing in your production environment, then the data access can be a risk if you have sensetive data. In which case, I might want to hire a firm with full time employees. Review collected by and hosted on G2.com.

The best part while working with the Cobolt team was their descriptive daily updates on the pentest with all possible scenarios they tested.

All their updates are posted in a professional manner with easy to understand terms.

The findings reported by them has a very good template with detailed PoC and screen shots. The report is easily understood when shared with customers. They also justify the severity reported for the findings.

They ensure to deploy a team of skilled pentesters to get the job done. Overall their service gets the job done and the report is crafted in a very professional way Review collected by and hosted on G2.com.

One drawback observed was that if the application is complicated or has lot of features, some in-depth coverage is missed out. On several occasions, few pentest issues were found by internal pentesting team that was missed out by Cobalt team. This probably happens cause the same pentesting team is not during the next round of pentest. Something that they can improve upon. Review collected by and hosted on G2.com.

The timely response from their team with each and every finding. They provide detailed explanations for each finding and how to reproduce it. The report they provide after the completion of the pen test is very helpful and easy to use for different compliance standards. The portal is user-friendly and intuitive. The integration with Slack is extremely helpful for keeping track of updates. Their support over Slack is outstanding throughout the entire process. Review collected by and hosted on G2.com.

The documentation to use the product can be improved.

The portal is user-friendly but a detailed tutorial or documentation will help users to navigate and use the advance features available. Review collected by and hosted on G2.com.

I really liked that our needs were met completely. We had a meeting with the team before the project kicked off and we were able to set our expectations for everything we needed. Once the time came to execute the project, everything was done to our specifications and we were able to get all of the reporting done the way we wanted it. We were very happy with the experience. Review collected by and hosted on G2.com.

I do not have anything negative to say about Cobalt or the experience we recieved. All of my interactions with the team was great, and the project was done exactly the way I wanted it to go. Review collected by and hosted on G2.com.

It is very easy to setup and conduct a pen test.

Once your pen test is completed you have immediate access to multiple different reports to provide to your customers and internal stakeholders (attestation letter, full report, executive report, etc).

Customer support is very fast to respond if there are any issues. Review collected by and hosted on G2.com.

It would be nice if they would not have an upcharge to integrate with work item tracking (ADO etc). Review collected by and hosted on G2.com.

Cobalt identifies vulnerabilities in our website that could be exploited by hackers. They provide recommendations for fixing the issues, and after the fixes are implemented, they review and offer feedback on the resolution. Good Customer support they offer and ease in understanding the issues. Review collected by and hosted on G2.com.

They do pentesting for 8-10days and in between that timeframe if site fail in that case the timeframe will be less for testing. Review collected by and hosted on G2.com.

Very easy to get into the platform and be interative. You can do one test and quickly move onto another without having tio go through the process of another engagement. The customizeable reporting and integrations come in handy. Well defined interface, can get expensive if you do a lot of testing but don't need a dedicated individual. Review collected by and hosted on G2.com.

The initial login is a little confusing. It could use a little more hand holding, especially if you have already registered and forgotten.

Feedback cycles vary depending on the individual working on you engagement. Review collected by and hosted on G2.com.

The pen-test experience with Cobalt works just great for us. The main pros I enjoy when working with them are the following:

- Ease of setup. In your Cobalt account, you set up your app details, which have to be tested. Even if you're new to all this stuff, the form contains enough instructions to guide you through the whole process. If that information is not enough, you get in-person support, which will help you through the process.

- Quick start and turnaround. As soon as you decide to launch your test, it only takes Cobalt 48 hours to find test engineers according to your requirements. Or you can easily plan for many months. All will start on time.

- Real-time reporting. You don't need to wait two weeks for the test to be fully finished to learn about the findings. Once a vulnerability is identified, its details are added to your Cobalt account. If you're using Jira for project management, you can also set up an integration, which will create a Jira issue with all the vulnerability details. Your developer can jump straight on it and fix the problem without switching to any other account. Additionally, all vulnerabilities found come with remediation instructions.

- Ongoing communication. You get a Slack channel organized with the testers who report to you daily, who you can ask questions and get explanations. We asked to assign us the testers who can communicate during our timezone for better collaboration.

We've been using Cobalt for almost three years now and are fully satisfied with the whole experience. Review collected by and hosted on G2.com.

There is nothing to note; the experience with Cobalt makes the pent-test process easy and reliable. Review collected by and hosted on G2.com.

The talent and professionalism and customer service is second to none. We use Cobalt to establish a baseline with respect to vulnerability findings and security targets. Also the test are very agile, a big plus. Review collected by and hosted on G2.com.

No real downside. Seriously no issues with the product. Review collected by and hosted on G2.com.

Adversary Simulation and Red Teaming. Cobalt Strike isn’t your run-of-the-mill penetration testing tool. It goes beyond finding unpatched vulnerabilities and misconfigurations. Instead, it simulates the tactics and techniques of an advanced adversary within a network. Imagine slipping into the shoes of a stealthy, long-term infiltrator—someone who’s quietly embedded themselves in the digital shadows. Review collected by and hosted on G2.com.

Nothing ... I think Cobalt is a awesome tool... Review collected by and hosted on G2.com.