Detectify Reviews & Product Details

Deep scan software, automated login scripts. Review collected by and hosted on G2.com.

Sometimes the automated login scripts that you can record get problematic if many steps are involved. This essentially means that you have to split them into multiple scripts. Then again, this is acceptable. Review collected by and hosted on G2.com.

Easy and fast track to start scanning. Even you are not a specialist in security area. Review collected by and hosted on G2.com.

Visibility and user privilege set up is not flexible enough. There are three levels of user rights only and the admin is actually the only one with you can do something. There needs to be more flexibility in manging the user rights. Limitation is now related too much the Teams structure instead of individual user rights. e.g. the creation of team and managing users should be separated from managing of the scans and scan profiles.

Also, when scanning subcontractors environment, that doesn't have access to the tool itself, but still need to have the details of the report. They can't drill down to the code level finding details, which remain in tool and not can be found in detailed report. Review collected by and hosted on G2.com.

Weekly scheduled Scan with the email reports Review collected by and hosted on G2.com.

API scan is not that usefull due to its beta stage Review collected by and hosted on G2.com.

Detectify is adding new findings from time to time which allows us to detect the latest vulnerabilities. Review collected by and hosted on G2.com.

That changes are performed on API's and not notifying customers about it. Review collected by and hosted on G2.com.

Easy to use. At the same time it saves us a lot of the guessing work. Review collected by and hosted on G2.com.

A bit weird pricing model. We would like to get Jira issues on some sub domains but not all. That would generate a new scan profile and additional cost. Review collected by and hosted on G2.com.

Easy to use, quick scans, actionable results with easy to understand vulnerability proof of concepts. Very rare to get false positives in comparions to other scanners. Review collected by and hosted on G2.com.

It is not built for managing several companies and teams, no good way to view results across the group. API tokens are per "team" in Detectify terms, so it is hard to manage at scale. Setting up SSO with Okta was also a nightmare. Review collected by and hosted on G2.com.

We've tried many other security scanners, all the others felt old or over complicated.

Switching to Detectify it immediately started reporting on much more modern security checks. I can rest safer knowing that as new vulnerabilities are discovered on the web that Detectify has our back & adds those checks in quickly and will be scanning for them soon keeping us up to date with the latest vulnerabilities. Review collected by and hosted on G2.com.

It's pretty awesome, maybe some more controls over how the crawling is done would be useful but that's about it. Review collected by and hosted on G2.com.

Initial configuration was easy; reports are clear and well organized Review collected by and hosted on G2.com.

Scan profiles for distinct subdomains under a root domain are treated as separate from a pricing perspective. We use many subdomains in our micro services architecture to isolate web requests. Review collected by and hosted on G2.com.

We were looking to find a solution to scan a fairly expansive eccommerce platform, with multiple legacy and new solutions in place. This wouldn't have worked with a more static type of tool; our ecosystem is quite dynamic and evolves rapidly as well as being expansive. Detectify really provides a good solution for this; it's straightforward to integrate with DNS, broad enough to provide a really valuable set of insights and dynamic enough to track change over time. Detectify is also able to translate complex security issues into very straightforwards and easy to understand problems. As our organisation has team members with all sorts of different levels of maturity in information security, having something easy to understand and action is a must. Review collected by and hosted on G2.com.

The big challenge with any tool is signal-to-noise ratio. Because Detectify captures so much, it can sometimes be challenging to see what is relevant versus what is less so. That said, Detectify naturally applies an intuitive threat score as well as prioritisation of impact of issues it finds from high through to information. This again really helps to understand what to prioritise versus accept and where to focus our efforts. Review collected by and hosted on G2.com.

Finding things that you usually forget to check before releasing. Also finding web server configurations that in some occasions isn't correctly setup. Review collected by and hosted on G2.com.

Have yet to find something that i really don't enjoy with the service. To me, the UI is a bit too cluttered and "big", so I'd like a bit more compact experience. Review collected by and hosted on G2.com.