Hackmetrix
How does Fluid Attacks' solution compare to Hackmetrix's? The following comparison
table enables you to discern the performance of both providers across various attributes essential for meeting
your company’s cybersecurity needs. To better understand each attribute, read their descriptions in the
dedicated page.
Organization
|
Attribute
|
Essential
|
Advanced
|
Hackmetrix
|
|
Focus
|
|||
|
Extras
|
None
|
None
|
|
|
Headcount
|
|||
|
Headcount distribution
|
|||
|
Headcount growth
|
|||
|
Headquarters
|
|||
|
Countries
|
|||
|
Reputation
|
Same
|
No
reviews
|
|
|
Followers
|
Same
|
||
|
Research Firms
|
None
|
None
|
None
|
|
Founded
|
2001 | ||
|
Funding
|
Bootstrapped
|
Same
|
$3M
USD in 7 rounds from 13 investors
|
|
Acquisitions
|
None
|
None
|
None
|
|
Revenue
|
|||
|
CVE
|
257 CVEs
reported to MITRE,
ranked in the top 10 CVE labs
worldwide
|
0 CVEs reported to MITRE
|
|
|
Compliance
|
SOC 2 Type
II and SOC
3
|
||
|
Bug bounty
|
Yes |
No
|
|
|
Visits
|
|||
|
Authority
|
|||
|
Vulnerability database
|
Same |
None
|
|
|
Content
|
|||
|
Knowledge base
|
13 KB sections |
No
|
|
|
Community
|
No
|
||
|
Sync training
|
No
|
No
|
No |
|
Async training
|
3 product use
courses, all free
|
1 security
education course (free)
|
|
|
Distribution
|
Same
|
||
| Marketplaces | AWS | ||
|
Freemium
|
No
|
No
|
No
|
|
Free trial
|
|||
|
Demo
|
|||
|
Pricing
|
|||
|
Pricing tiers
|
1 plan
|
1 plan
|
3 plans (ISO27001 compliance, PCI DSS compliance, ethical hacking). First 2 transparent |
|
Minimum commit
|
|||
|
Minimum payment period
|
|||
|
Minimum capabilities
|
API security testing, ASPM, binary SAST, containers, CSPM, DAST, IaC, SAST, SCA and secrets |
||
|
Minimum scope
|
1 group |
1 author
|
No information available
|
|
Pricing drivers
|
|||
|
Minimum monthly payment
|
No information available |
Service
|
Attribute
|
Essential
|
Advanced
|
Hackmetrix
|
|
PTaaS
|
No
|
No. MPT
|
|
|
Reverse engineering
|
No
|
Yes | No information available |
|
Secure code review
|
No
|
No information available
|
|
|
Pivoting
|
No
|
No information available
|
|
|
Exploitation
|
No
|
||
|
Manual reattacks
|
Not applicable
|
1 reattack | |
|
Zero-day
vulnerabilities
|
None
|
Continuous zero-day
vulnerability research
|
None
|
|
SLA
|
No information available | ||
|
Min availability
|
>=99.95%
per minute LTM
|
No information available
|
|
|
After-sale guarantees
|
No
|
Yes
|
No
|
|
Accreditations
|
None
|
||
|
Hacker certifications
|
Not applicable
|
||
|
Type of contract
|
Employee
|
Same
|
|
|
Endpoint control
|
Not applicable
|
Total
|
No
|
|
Channel control
|
Not applicable
|
Total
|
No
|
|
Standards
|
Some requirements from 65 standards,
7 in common and 58 additional
|
All requirements from the same standards
|
10 standards,
7 in common and 3 additional
|
|
Detection method
|
|||
|
Remediation
|
5,
1 in common and 4 additional
|
Same, plus 1
|
1 in common
|
|
Outputs
|
5,
1 in common and 4 additional
|
Same, plus 2
|
1 in
common
|
Product
|
Attribute
|
Essential |
Advanced
|
Hackmetrix
|
|
ASPM
|
Yes |
No
|
|
|
API
|
Yes. No information available
|
||
|
IDE
|
Same, plus
1 functionality
|
No
|
|
|
CLI
|
No
|
||
|
CI/CD
|
Does not break the build
|
||
|
Vulnerability sources
|
14 sources
|
No
|
|
|
Priority criteria
|
|||
|
Custom prioritization
|
Same |
No
|
|
|
Scanner origin
|
No
|
||
|
SCA
|
No
|
||
|
SCA (AI models)
|
No
|
No
|
No
|
|
Reachability
|
12 languages
|
No
|
|
|
Reachability type
|
No
|
||
|
SBOM
|
No | ||
|
Malware detection
|
Yes
|
Yes
|
No
|
|
Autofix on components
|
No
|
No |
No
|
|
Containers
|
No
|
||
|
Source SAST (languages)
|
No
|
||
|
Source SAST (frameworks)
|
No
|
||
|
Custom rules
|
No
|
No
|
No
|
|
IaC
|
No
|
||
|
Binary SAST
|
1 type
of binary
|
Same,
plus 2 types of binaries
|
No
|
|
DAST
|
No |
||
|
API security testing
|
No
|
No
|
|
|
IAST
|
No
|
No
|
No
|
|
CSPM
|
Yes |
No
|
|
|
Environments
|
Left & Right (included)
|
Same
|
Left only (included) |
|
ASM
|
No
|
No
|
No
|
|
Secrets
|
Same,
plus verify other attack vectors and secrets exploitability
|
No
|
|
|
AI
|
No | ||
|
Open source
|
Not applicable
|
No
|
|
|
Provisioning as Code
|
No
|
||
|
Deployment
|
|||
| Regions |
No
information available
|
||
|
Status
|
No
|
||
|
Incidents
|
No information available
|
Integrations
|
Attribute
|
Essential
|
Advanced
|
Hackmetrix
|
|
SCM
|
None
|
||
|
Binary repositories
|
None
|
None
|
None
|
|
Ticketing
|
3, 1 in common and 2 additional
|
1 in common |
|
|
ChatOps
|
None |
None
|
|
|
IDE
|
None |
||
|
CI/CD
|
None
|
||
|
SCA
|
None |
||
|
Container
|
None |
||
|
SAST
|
None |
||
|
DAST
|
None |
||
|
IAST
|
None |
None
|
None
|
|
Cloud
|
None
|
||
|
CSPM
|
None | ||
|
Secrets
|
None |
||
|
Remediation
|
None
|
None
|
None
|
|
Bug bounty
|
None |
None
|
None
|
|
Vulnerability management
|
None
|
None
|
None
|
|
Compliance
|
None
|
None
|
None
|
References were last checked on Jun 13, 2025.
Free trial
Search for vulnerabilities in your apps for free with Fluid
Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan,
which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.