Cyver Core Pros and Cons

They give businesses and individuals considering entrepreneurship in the offsec/pentest business an opportunity to not only complete but offer more services and capability.

It likely would be be a great move for an enterprise team as well that does any level of testing internally, especially for the newer collab features/api.

The other "options" I've seen are just typical corp/vc money grabs. Review collected by and hosted on G2.com.

I cannot think of anything I dislike about Cyver. Review collected by and hosted on G2.com.

Automatic report generation and vulnerability report uploading feature. Review collected by and hosted on G2.com.

Lack of project management features such as time tracking. Review collected by and hosted on G2.com.

Cyver Core has been get in working with our firm for personal development. They have adhered to specific requests for our firm. This has helped our firm grow to meet the needs being asked of us by our clients. Review collected by and hosted on G2.com.

My biggest issue with Cyver is the inconsistency with its optimization. We will have experiences that will differ greatly depending on the patch. While some things are consistent, our workflow has the possibility of coming to a halt depending on the patch. I would just recommend greater detail in bug fixing or testing prior to a rollout. Review collected by and hosted on G2.com.

Cyver makes my day-to-day work significantly more manageable. Review collected by and hosted on G2.com.

Sometimes there are minor bugs, but the fixes come out relatively fast. Review collected by and hosted on G2.com.

The automation side of it and findings upload.

I also really get to feel like a part of the client's security team within the company, rather than working completely externally, because the real-time findings means client teams see findings as they are uploaded and we can collaborate on finding a fix Review collected by and hosted on G2.com.

If I do recovery/recon and I use customized scripts in that tool or very specialized/customized tooling or plugins/parameters, the import isn't 100% accurate, but that's improving as we add more data to filter. If I want to import an XML with that customized data, it doesn't always support that data Review collected by and hosted on G2.com.

I can set up a pentest report template and then quickly launch a new pentest, I don't have to send PDF reports to customers outside the application, it saves a lot of time, it automatically creates the graphics you need for a management summary, if you use a compliance framework you can map pentests to those frameworks and you get easy oversight of how client vulnerabilities map to those compliance requirements, I get a lot of comments from customers that they like being able to interact with us and can manage the vulnerabilities we find and mark them as solved Review collected by and hosted on G2.com.

It's difficult to pinpoint dislikes as most feature requests I've made have been met. Review collected by and hosted on G2.com.