Attribute
|
Essential
|
Advanced
|
HackerOne
|
Focus
|
|||
Extras
|
None
|
None
|
|
Employees
|
Pending |
||
Reputation
|
Same
|
Maximum of 8.93 based on 74 reviews over 8 years from: G2, Gartner Peer Insights, PeerSpot, Software Advice and TrustRadius.
|
|
Followers
|
Same
|
||
Research Firms
|
None
|
None
|
|
Founded
|
2001 | ||
Funding
|
Bootstrapped
|
Same
|
159.4M USD in 6 rounds from 5 investors (2 acquisitions)
|
Revenue
|
|||
CVE
|
257 CVEs reported to MITRE, ranked in the top 10 CVE labs worldwide.
|
1.474 CVEs reported to MITRE
|
|
Compliance
|
SOC 2 Type II and SOC 3
|
||
Documentation
|
|||
Visits
|
|||
Authority
|
|||
Distribution
|
Same
|
||
Marketplaces | AWS and Azure | ||
Freemium
|
No
|
No
|
|
Free trial
|
No
|
||
Demo
|
|||
Pricing
|
|||
Pricing drivers
|
Attribute
|
Essential
|
Advanced
|
HackerOne
|
PTaaS
|
No
|
Yes (as part of the bug bounty program)
|
|
Reverse engineering
|
No
|
Yes | Yes |
Secure code review
|
No
|
||
Pivoting
|
No
|
Chains vulnerabilities to reveal new, higher-impact ones.
|
|
Exploitation
|
No
|
||
Zero-day vulnerabilities
|
None
|
Zero-day vulnerability research continuously
|
|
SLA
|
Response, time to bounty, time to triage and time to resolution | ||
Accreditations
|
|||
Hacker certifications
|
Not applicable
|
Pending
|
|
Type of contract
|
Employee
|
Same
|
|
Standards
|
Some requirements from 65 standards, 15 in common and 50 additional.
|
All requirements from the same standards
|
15 standards, all in common.
|
Detection method
|
|||
Remediation
|
5 remediation options, 1 in common and 4 additional.
|
Same, plus 1 remediation option.
|
1 remediation option in common.
|
Outputs
|
5 formats, 1 in common and 4 additional.
|
Same, plus 2 formats.
|
4 formats, 1 in common and 3 additional.
|
Attribute
|
Essential |
Advanced
|
HackerOne
|
ASPM
|
Yes |
No
|
|
IDE
|
No
|
||
CLI
|
No
|
||
CI/CD
|
No
|
||
SCA
|
13 package managers.
|
No
|
|
Reachability
|
5 languages.
|
No
|
|
SBOM
|
13 package managers.
|
No
|
|
Containers
|
No |
||
Source SAST (languages)
|
17 languages.
|
No
|
|
Source SAST (frameworks)
|
5 frameworks.
|
No |
|
Binary SAST
|
1 type of binary.
|
Same, plus 2 types of binaries.
|
No
|
DAST
|
No |
||
IAST
|
No
|
No
|
No
|
CSPM
|
Yes |
No
|
|
Secrets
|
15 secrets types.
|
Same, plus verify other attack vectors and secrets exploitability.
|
No
|
AI
|
3 functions, 1 in common and 2 additional.
|
1 function in common.
|
|
Fast and automatic
|
No
|
||
Open source
|
Not applicable
|
No
|
|
Deployment
|
|||
Regions | |||
Status
|
|||
Incidents
|
Pending
|
Attribute
|
Essential
|
Advanced
|
HackerOne
|
SCM integrations
|
4 integrations.
|
None
|
|
Binary repositories integrations
|
None
|
None
|
None
|
Ticketing integrations
|
3 integrations, all in common.
|
7 integrations, 3 in common 4 additional. |
|
ChatOps integrations
|
None |
None
|
|
IDE integrations
|
None |
||
CI/CD integrations
|
26 integrations
|
None
|
|
SCA integrations
|
Native scanner (included, no integration needed)
|
None |
|
Container integrations
|
Native scanner (included, no integration needed)
|
None |
|
SAST integrations
|
Native scanner (included, no integration needed)
|
None |
|
DAST integrations
|
Native scanner (included, no integration needed)
|
None |
|
IAST integrations
|
None |
None
|
None
|
Cloud Integrations
|
3 integrations.
|
None
|
|
CSPM integrations
|
Native scanner (included, no integration needed)
|
None | |
Secrets integrations
|
Native scanner (included, no integration needed)
|
None |
|
Compliance integrations
|
None
|
None
|
1 integration.
|