|
Attribute
|
Essential
|
Advanced
|
Faraday
|
|
Focus
|
Vulnerability management
|
||
|
Extras
|
None
|
None
|
None
|
|
Headcount
|
55 | ||
|
Headcount distribution
|
Engineering 42%, IT 13%, sales 13%,
marketing 2%, operations 4% and others 26%
|
Engineering 18%, IT 20%, sales 7%,
marketing 4%, operations 5% and others 46%
|
|
|
Headcount growth
|
+8%, +10%, -8%
|
0%, +4%, +20%
|
|
|
Headquarters
|
CO and US
|
AR and US | |
|
Countries
|
AR, BO, CA, CL, CO, DO, MX, PA, PE and
US
|
AR
|
|
|
Reputation
|
Same
|
10 from 10 reviews over 1 year on G2
and Gartner
|
|
|
Followers
|
Same
|
14K based on the following: Instagram,
LinkedIn and X
|
|
|
Research firms
|
None
|
None
|
None
|
|
Founded
|
2001 |
2014
|
|
|
Funding
|
Bootstrapped
|
Same
|
No information available
|
|
Acquisitions
|
None
|
None
|
None
|
|
Revenue
|
10M to 15M
|
1M to 5M
|
|
|
CVEs as CNA Researcher
|
Not applicable, as it is not a CNA
Researcher
|
||
|
Compliance
|
SOC 2 Type II and SOC 3
|
None | |
|
Bug bounty
|
No
|
||
|
Visits
|
21K
per month. Top 3: 26% CO, 8% FR, 7% US. Others 59%
|
8K per month. Top 3: 40% ES, 9% CN, 8%
DZ. Others 43%
|
|
|
Authority
|
25 out of 100
|
||
|
Public vulnerability DB
|
Discovered and third-party
|
None
|
|
|
Content
|
Same
|
Blog, documentation and support
|
|
| Comprehensive documentation |
13 documentation sections, 5 in common
and 8 additional
|
5 documentation sections, all in common
|
|
|
Community
|
No
|
||
|
Sync training
|
1 workshop
|
No
|
|
|
Async training
|
3 product use courses, all free
|
No
|
|
|
Distribution
|
Same
|
Direct or with any of its partners
|
|
| Marketplaces | None | ||
|
Freemium
|
No
|
No
|
Yes
|
|
Free trial
|
5-day free trial
|
||
|
Demo
|
Yes
|
||
|
Open demo
|
No
|
No
|
No
|
|
Pricing
|
Contact sales and public web
|
||
|
Pricing tiers
|
1 plan
|
1 plan
|
2 plans (professional and corporate).
All transparent
|
|
Minimum term
|
Annually
|
||
|
Minimum payment period
|
Monthly
|
||
|
Minimum capabilities
|
ASPM, binary SAST, containers, CSPM, DAST, IaC, SAST, SCA and
secrets
|
Same plus: API
security testing, PTaaS, RE and SCR
|
ASOC
|
|
Minimum scope
|
1 author
|
129 assets
|
|
|
Pricing drivers
|
Assets
|
||
|
Minimum monthly payment
|
670 USD
|
||
|
Free implementation
|
No information available
|
||
|
Free support
|
No
|
|
Attribute
|
Essential
|
Advanced
|
Faraday
|
|
PTaaS
|
No
|
Yes
|
|
|
Reverse engineering
|
No
|
Yes | |
|
Secure code review
|
No
|
Yes
|
|
|
Pivoting
|
No
|
No information available
|
|
|
Exploitation
|
No
|
Yes
|
|
|
Manual reattacks
|
Not applicable
|
No information available
|
|
|
Zero-day
vulnerabilities
|
None
|
Continuous zero-day vulnerability research
|
None
|
|
SLA
|
No | ||
|
Minimum availability
|
>=99.95% per minute LTM
|
None
|
|
|
After-sale guarantees
|
No
|
Yes
|
Yes
|
|
Accreditations
|
None
|
||
|
Hacker certifications
|
Not applicable
|
6 from 5 different types
|
|
|
Type of contract
|
Employee
|
Same
|
Employee or freelance
|
|
Endpoint control
|
Not applicable
|
Total
|
No information available
|
|
Channel control
|
Not applicable
|
Total
|
No information available
|
|
Standards
|
Some requirements from 67 standards, 7 in common and 60
additional
|
All requirements from the same standards
|
10 standards, 7 in common and 3
additional
|
|
Detection method
|
Automated tools, AI and human intelligence
|
Automated tools and human
intelligence
|
|
|
Remediation
|
5, 1 in common and 4 additional
|
Same, plus 1
|
2, 1 in common and 1 additional
|
|
Outputs
|
5, 2 in common and 3
additional
|
Same, plus 2
|
5, 2 in common and 3 additional
|
|
Attribute
|
Essential |
Advanced
|
Faraday
|
|
ASPM
|
Yes
|
||
|
API
|
REST with JSON
|
||
|
IDE
|
Same, plus 1 functionality
|
No
|
|
|
CLI
|
Yes
|
||
|
CI/CD
|
Does not breaks the build
|
||
|
Vulnerability sources
|
4 sources
|
None
|
|
|
Threat model alignment
|
No
|
||
|
Priority criteria
|
CVSS v4.0
|
||
|
Custom prioritization
|
No
|
||
|
Scanner origin
|
None
|
||
|
SCA
|
No
|
||
|
AI security
|
No
|
No
|
|
|
Reachability
|
12 languages
|
No
|
|
|
Reachability type
|
Not applicable
|
||
|
SBOM
|
No
|
||
|
Malware detection
|
Yes
|
Yes
|
No
|
|
Autofix on components
|
No
|
No
|
No
|
|
Containers
|
No
|
||
|
Source SAST
(languages)
|
No
|
||
|
Source SAST
(frameworks)
|
No
|
||
|
Custom rules
|
No
|
No
|
No
|
|
IaC
|
No
|
||
|
Binary SAST
|
1 type of binary
|
Same, plus 2 types of binaries
|
No
|
|
DAST
|
No
|
||
|
API security testing
|
No
|
No
|
|
|
IAST
|
No
|
No
|
No
|
|
CSPM
|
Yes |
No
|
|
|
ASM
|
No
|
No
|
No
|
|
Secrets
|
Same, plus verify other attack vectors
and secrets exploitability
|
No
|
|
|
AI
|
No
|
||
|
MCP
|
No
|
||
|
Open-source
|
Not applicable
|
GNU LGPL 3 license, partially equivalent to the paid version
|
|
|
Provisioning as code
|
No
|
||
|
Deployment
|
SaaS + on-premises (no tenancy
information)
|
||
| Regions |
No information available
|
||
|
Status
|
No
|
||
|
Incidents
|
No information available
|
|
Attribute
|
Essential
|
Advanced
|
Faraday
|
|
SCM
|
None
|
||
|
Binary repositories
|
None
|
None
|
None
|
|
Ticketing
|
3, 2 in common and 1 additional
|
5, 2 in common and 3 additional
|
|
|
ChatOps
|
None |
None
|
1 |
|
IDE
|
None
|
||
|
CI/CD
|
21, 3 in common and 18 additional
|
3, all in common
|
|
|
SCA
|
5
|
||
|
Container
|
3 | ||
|
SAST
|
5
|
||
|
DAST
|
10
|
||
|
IAST
|
None |
None
|
None
|
|
Cloud
|
3, none in common
|
5, none in common
|
|
|
CSPM
|
2 | ||
|
Secrets
|
1
|
||
|
Remediation
|
None
|
None
|
None
|
|
Bug bounty
|
None
|
None
|
None
|
|
Vulnerability management
|
None
|
None
|
None
|
|
Compliance
|
None
|
None
|
None
|