|
Attribute
|
Essential
|
Advanced
|
DataDog
|
|
Focus
|
|||
|
Extras
|
None
|
None
|
|
|
Headcount
|
10,357 | ||
|
Headcount Distribution
|
|||
|
Headcount Growth
|
|||
|
Headquarters
|
|||
|
Countries
|
|||
|
Reputation
|
Same
|
||
|
Followers
|
Same
|
||
|
Research firms
|
None
|
None
|
|
|
Founded
|
2001 | ||
|
Funding
|
Bootstrapped
|
Same
|
$1B USD in 9 rounds from 16 investors |
|
Acquisitions
|
None
|
None
|
Acquired 0 times and made 16
acquisitions
|
|
Revenue
|
|||
|
CVEs as CNA Researcher
|
Not applicable, as it is not a CNA
Researcher
|
||
|
Compliance
|
SOC
2 Type II and SOC
3
|
CSA STAR Level 1, DORA, EU-US DPF, FedRAMP, HIPAA, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, PCI DSS, SOC 2, SOC 2 Type I and TISAX | |
|
Bug Bounty
|
|||
|
Visits
|
|||
|
Authority
|
|||
|
Public vulnerability DB
|
None
|
||
|
Content
|
Same
|
||
| Comprehensive documentation |
13 documentation
sections, 2 in common
and 11 additional
|
7 documentation sections, 2 in
common and 5
additional
|
|
|
Community
|
|||
|
Sync training
|
1 workshop
|
No
|
|
|
Async training
|
3 product use
courses, all free
|
Security education
platform (subscription based)
|
|
|
Distribution
|
Same
|
||
| Marketplaces | AWS, Azure, GCP and GitHub | ||
|
Freemium
|
No
|
No
|
|
|
Free trial
|
|||
|
Demo
|
|||
|
Open Demo
|
No
|
No
|
No
|
|
Pricing
|
|||
|
Pricing tiers
|
1 plan
|
1 plan
|
1 plan
|
|
Minimum term
|
|||
|
Minimum payment period
|
|||
|
Minimum capabilities
|
Same plus: API security testing, PTaaS,
RE and SCR
|
||
|
Minimum scope
|
1 author
|
||
|
Pricing drivers
|
|||
|
Minimum monthly payment
|
|||
|
Free implementation
|
|||
|
Free support
|
|
Attribute
|
Essential
|
Advanced
|
DataDog
|
|
PTaaS
|
No
|
No
|
|
|
Reverse engineering
|
No
|
No | |
|
Secure code review
|
No
|
No
|
|
|
Pivoting
|
No
|
No
|
|
|
Exploitation
|
No
|
No
|
|
|
Manual reattacks
|
Not applicable
|
Not applicable
|
|
|
Zero-day
vulnerabilities
|
None
|
Continuous zero-day vulnerability research
|
None
|
|
SLA
|
Availability and support | ||
|
Min availability
|
>=99.95%
per minute LTM
|
>=
99.8% per month
|
|
|
After-sale guarantees
|
No
|
Yes
|
|
|
Accreditations
|
None
|
||
|
Hacker certifications
|
Not applicable
|
Not applicable
|
|
|
Type of contract
|
Employee
|
Same
|
|
|
Endpoint control
|
Not applicable
|
Total
|
Not applicable
|
|
Channel control
|
Not applicable
|
Total
|
Not applicable
|
|
Standards
|
Some requirements from 67 standards,
17 in common and 50
additional
|
All requirements from the same standards
|
26 standards, 17 in
common and 9
additional
|
|
Detection method
|
Automated tools and AI | ||
|
Remediation
|
5,
4 in common and 1 additional
|
Same, plus 1
|
4,
all in common
|
|
Outputs
|
5,
2 in common and 3
additional
|
Same, plus 2
|
9, 2
in common and 7 additional
|
|
Attribute
|
Essential |
Advanced
|
DataDog
|
|
ASPM
|
No
|
||
|
API
|
|||
|
IDE
|
5 functionalities,
2 in common and 3
additional
|
Same,
plus 1 functionality
|
3 functionalities,
2 in common and 1
additional
|
|
CLI
|
|||
|
CI/CD
|
|||
|
Vulnerability sources
|
4 sources,
2 in common and 2 additional
|
3 sources,
2 in common and 1 additional
|
|
|
Threat model alignment
|
No
|
||
|
Priority criteria
|
|||
|
Custom prioritization
|
No
|
||
|
Scanner origin
|
|||
|
SCA
|
23 package
managers, 11 in common and 12
additional
|
14 package
managers, 11 in common and 3
additional
|
|
|
AI security
|
No
|
||
|
Reachability
|
12 languages
|
No
|
|
|
Reachability type
|
Not applicable
|
||
|
SBOM
|
22 package
managers, 11 in common and 11
additional
|
13 package
managers, 11 in common and 2
additional
|
|
|
Malware detection
|
Yes
|
Yes
|
|
|
Autofix on components
|
No
|
No
|
No
|
|
Containers
|
4 distributions,
3 in common and 1 additional
|
16 distributions,
3 in common and 13
additional
|
|
|
Source SAST
(languages)
|
12,
9 in common and 3 additional
|
10,
9 in common and 1 additional
|
|
|
Source SAST
(frameworks)
|
No information available
|
||
|
Custom rules
|
No
|
No
|
|
|
IaC
|
6,
3 in common and 3 additional
|
3, all
in common
|
|
|
Binary SAST
|
1 type of binary
|
Same,
plus 2 types of binaries
|
No
|
|
DAST
|
No
|
||
|
API security testing
|
No
|
4 types
of APIs, 1 in common and 3
additional
|
|
|
IAST
|
No
|
No
|
Yes. No
information available
|
|
CSPM
|
Yes | ||
|
ASM
|
No
|
No
|
No
|
|
Secrets
|
15 secrets
types, 5 in common and 10
additional
|
Same,
plus verify other attack vectors
and secrets exploitability
|
7 secrets
types, 5 in common and 2
additional
|
|
AI
|
3 functions,
2 in common and 1
additional
|
3 functions, 2 in
common and 1 additional
|
|
|
MCP
|
|||
|
Open-source
|
Not applicable
|
No
|
|
|
Provisioning as Code
|
No
|
||
|
Deployment
|
SaaS and on-premises
|
||
| Regions | |||
|
Status
|
|||
|
Incidents
|
|
Attribute
|
Essential
|
Advanced
|
DataDog
|
|
SCM
|
6,
4 in common and 2 additional
|
4, all in
common
|
|
|
Binary repositories
|
None
|
None
|
|
|
Ticketing
|
3,
all in common
|
7, 3 in
common and 4 additional
|
|
|
ChatOps
|
None |
None
|
4 |
|
IDE
|
3,
all in common
|
7,
3 in common and 4 additional
|
|
|
CI/CD
|
21,
13 in common and 8 additional
|
21, 13
in common and 8
additional
|
|
|
SCA
|
Native
and 5 integrations
|
||
|
Container
|
18 | ||
|
SAST
|
Native and 2 integrations
|
||
|
DAST
|
|||
|
IAST
|
None |
None
|
Native
and 1 integration
|
|
Cloud
|
3,
all in common
|
Native
and 6 integrations
|
|
|
CSPM
|
Native and 14 integrations | ||
|
Secrets
|
|||
|
Remediation
|
None
|
None
|
|
|
Bug bounty
|
None
|
None
|
None
|
|
Vulnerability management
|
None
|
None
|
|
|
Compliance
|
None
|
None
|