Comparison between Fluid Attacks and Devel | Fluid Attacks

Devel

How does Fluid Attacks' solution compare to Devel's? The following comparison table enables you to discern the performance of both providers across various attributes essential for meeting your company’s cybersecurity needs. To better understand each attribute, read their descriptions in the dedicated page.

Organization
Attribute
Essential
Advanced
Devel
Focus
Native ASPM with in-house scanners
AI-powered PTaaS on top of native ASPM with in-house scanners
MPT
Extras
None
None
Attack simulation (BAS), automation and orchestration (SOAR), cloud security review, compliance audits (PCI - DSS/ISO/Regulations), cybersecurity maturity analysis, forensic incident handling, incident response (CERT), monitoring 24/7 (SOC/NOC), social engineering simulations, user behavior analytics (UBA) and wireless assessments
Headcount
143
Same
 46
Headcount distribution
Engineering 42%, IT 13%, sales 13%, marketing 2%, operations 4% and others 26%
Same
Engineering 20%, IT 20%, sales 9%, marketing 2%, operations 2% and others 47%
Headcount growth
+8%, +10%, -8%
Same
-19%, -28%, -32%
Headquarters
CO and US
Same
CO, DO, GT, HN, MX, PA, SV and US
Countries
AR, BO, CA, CL, CO, DO, MX, PA, PE and US
Same
GT, PK and SV
Reputation
9.77 from 209 reviews over 7 years on Gartner and Clutch
Same
No reviews
Followers
20K based on the following: Facebook, Instagram, LinkedIn, X and YouTube
Same
12K based on the following: Facebook, Instagram, LinkedIn, X and YouTube
Research firms
None
None
None
Founded
 2001
Same
2005
Funding
Bootstrapped
Same
No information available
Acquisitions
None
None
None
Revenue
10M to 15M
Same
1M to 11M
CVEs as CNA Researcher
276 CVEs reported to MITRE, ranked in the top 10 CVE labs worldwide
Same
Not applicable, as it is not a CNA Researcher
Compliance
SOC 2 Type II and SOC 3
Same
ISO/IEC 9001, ISO/IEC 27001, PCI DSS, SOC 2 Type I and SOC 2 Type II
Bug bounty
Yes
Yes
Yes
Documentation
Yes
Yes
No
Visits
22K per month. Top 3: 23% IN, 22% CO, 15% UK. Others 40%
Same
3K per month. Top 3: 21% MX, 18% ES, 15% GT. Others 46%
Authority
31 out of 100
Same
31 out of 100
Public vulnerability DB
Discovered and third-party
Same
None
Content
Blog, documentation, e-books, glossary, reports, success stories, videos, webinars and white papers
Same
Blog
Comprehensive documentation
13 documentation sections
Same
No
Community
Forum
Same
No
Sync training
1 workshop
Same
No
Async training
3 product use courses, all free
Same
No
Distribution
Direct or with any of its 14 partners
Same
Direct
Marketplaces
AWS
Same
None
Freemium
No
No
No
Free trial
21-day free trial
PoV
No
Demo
Yes
Yes
No
Open demo
No
No
No
Pricing
Contact sales and marketplace 
Contact sales
Contact sales
Pricing tiers
1 plan
1 plan
No information available
Minimum term
Monthly
Monthly
No information available
Minimum payment period
Monthly
Monthly
No information available
Minimum capabilities
ASPM, binary SAST, containers, CSPM, DAST, IaC, SAST, SCA and secrets
Same plus: AI SAST, API security testing, PTaaS, RE and SCR
MPT
Minimum scope
1 author
Same
No information available
Pricing drivers
Authors
Same
No information available
Free implementation
Yes
Yes
No information available
Free support
Yes
Yes
No information available

Service
Attribute
Essential
Advanced
Devel
PTaaS
No
Yes
MPT and PTaaS
Reverse engineering
No
Yes
 Yes
Secure code review
No
Yes
Yes
Pivoting
No
Yes
No information available
Exploitation
No
Yes
Yes
Manual reattacks
Not applicable
Unlimited reattacks
No information available
Zero-day vulnerabilities
None
Continuous zero-day vulnerability research
None
SLA
Availability
Accuracy, availability and response
No
Minimum availability
99.95% per minute LTM
Same
None
After-sale guarantees
No
Yes
No
Accreditations
CNA and Penetration Testing by CREST
Same
None
Hacker certifications
Not applicable
202 from 59 different types
1 from 1 type
Type of contract
Employee
Same
Employee
Endpoint control
Not applicable
Total
No information available
Channel control
Not applicable
Total
No information available
Standards
Some requirements from 65 standards, 2 in common and 63 additional
All requirements from the same standards
2 standards, all in common
Detection method
Automated tools
Automated tools, AI and human intelligence
Human intelligence
Remediation
5, none in common
Same, plus 1
1
Outputs
5
Same, plus 2
No information available

Product
Attribute
 Essential
Advanced
Devel
ASPM
Yes
Yes
No
API
GraphQL with JSON
Same
No
IDE
5 functionalities
Same, plus 1 functionality
No
CLI
Yes
Yes
No
CI/CD
Breaks the build
Same
Does not break the build
Vulnerability sources
4 sources
Same
None
Threat model alignment
Yes
Yes
No
Priority criteria
CVSS v4.0, CVSSF, EPSS and KEV
Same
No information available
Custom prioritization
Priority score
Same
No
Scanner origin
In-house
In-house
None
SCA
23 package managers
Same
No
AI security
No
Yes
No
Reachability
12 languages
Same
No
Reachability type
Deterministic
Same
Not applicable
SBOM
22 package managers
Same
No
Malware detection
Yes
Yes
No
Autofix on components
No
No
No
Containers
4 distributions
Same
No
Source SAST (languages)
12
Same
No
Source SAST (frameworks)
22
Same
No
Custom rules
No
No
No
IaC
6
4
No
Binary SAST
1 type of binary
Same, plus 2 types of binaries
No
DAST
7 attack surface types
Same
No
API security testing
No
4 types of APIs
No
IAST
No
No
No
CSPM
Yes
 Yes
No
ASM
No
No
No
Secrets
15 secrets types
Same, plus verify other attack vectors and secrets exploitability
No
AI
3 functions
Same
No
MCP
Yes
Yes
No
Open-source
MPL-2.0 license. Totally equivalent to the paid version
Not applicable
No
Provisioning as Code
Yes
Yes
No
Deployment
SaaS (multi-tenant)
Same
SaaS (no tenancy information)
Regions
US
Same
No information available
Status
Yes
Yes
No
Incidents
4 per year
Same
No information available

Integrations
Attribute
Essential
Advanced
Devel
SCM
6
Same
None
Binary repositories
None
None
None
Ticketing
3
Same
None
ChatOps
None
None
 None
IDE
3
Same
None
CI/CD
21
Same
None
SCA
Native
Same
None
Container
Native
Same
 None
SAST
Native
Same
None
DAST
Native
Same
None
IAST
None
None
None
Cloud
3
Same
None
CSPM
Native
Same
 None
Secrets
Native
Same
None
Remediation
None
None
None
Bug bounty
None
None
None
Vulnerability management
None
None
None
Compliance
None
None
None

Notes
The latest update to this comparison was on Dec 30, 2025. The primary sources of information was devel.group, which was supplemented by specialized information-gathering sites, social media, and other sources.


Free trial message
Free trial
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.