NowSecure

How does Fluid Attacks' solution compare to NowSecure's? The following comparison table enables you to discern the performance of both providers across various attributes essential for meeting your company’s cybersecurity needs. To better understand each attribute, read their descriptions in the dedicated page.

Organization

Attribute	Essential	Advanced	NowSecure
Focus	Native ASPM with Built-In Scanners	AI-Powered PTaaS on top of Native ASPM with Built-In Scanners	PTaaS with Built-In Scanners for Mobile Applications
Extras	None	None	Mobile security training, MPT and security review for Google Play (ADA MASA)
Headcount	128	Same	109
Headcount distribution	Engineering 42%, TI 13%, sales 12%, marketing 2%, operations 4% and others 27%	Same	Engineering 22%, TI 20%, sales 10%, marketing 6%, operations 3% and others 39%
Headcount growth	-2%, -15%, +1%	Same	-1%, -15%, -32%
Headquarters	87% CO	Same	90% US
Countries	CO and US	Same	US
Reputation	9.82 from 60 reviews over 6 years on Gartner and Clutch	Same	8.88 from 36 reviews over 4 years on G2, Gartner and PeerSpot
Followers	18K based on the following: Facebook, Instagram, LinkedIn, X and YouTube	Same	20K based on the following: Instagram , LinkedIn, X and YouTube
Research Firms	None	None	None
Founded	2001	Same	2009
Funding	Bootstrapped	Same	$27.5M USD in 4 rounds from 5 investors
Acquisitions	None	None	None
Revenue	5M to 10M	Same	25M to 100M
CVE	257 CVEs reported to MITRE, ranked in the top 10 CVE labs worldwide	Same	None
Compliance	SOC 2 Type II and SOC 3	Same	ISO/IEC 27001 and SOC 2 Type II
Bug bounty	Yes	Yes	No
Visits	26K per month. Top 3: 36% MY, 33% CO, 5% IN and others 26%	Same	32K per month. Top 3: 64% US, 10% IN, 3% AU and others 23%
Authority	31 out of 100	Same	33 out of 100
Vulnerability database	Discovered	Same	None
Content	Blog, documentation, e-books, reports, videos, webinars and white papers	Same	Blog, case studies, data sheets, documentation, e-books, infographics, reports, webinars and white papers
Knowledge base	13 KB sections, 1 in common and 12 additional	Same	1 KB section in common
Community	Forum	Same	No
Sync training	No	No	No
Async training	3 product use courses	Same	56 security education courses (free) and 18 security education courses (paid)
Distribution	Direct or with any of its 14 partners	Same	Direct or with any of its partners
Marketplaces	AWS	Same	AWS and Azure
Freemium	No	No	No
Free trial	21-day free trial	PoV	PoV
Demo	Yes	Yes	Yes
Pricing	Contact sales, marketplace and public web	Contact sales	Contact sales and marketplaces
Pricing tiers	1 plan	1 plan	3 plans
Minimum commit	Monthly	Monthly	Annually
Minimum payment period	Monthly	Monthly	Annually
Minimum capabilities	API security Testing, ASPM, Binary SAST, Containers, CSPM, DAST, IaC, SAST, SCA and secrets	Same plus: PTaaS, RE and SCR	Binary SAST, DAST, IAST, SAST, SBOM, SCA and secrets
Minimum scope	1 group	1 author	1 app
Pricing drivers	Groups	Authors	Mobile apps
Minimum monthly payment	1.529 USD	1.529 + 429 USD	833 USD

Service

Attribute	Essential	Advanced	NowSecure
PTaaS	No	Yes	MPT and PTaaS
Reverse engineering	No	Yes	Yes
Secure code review	No	Yes	No information available
Pivoting	No	Yes	No information available
Exploitation	No	Yes	Yes
Manual reattacks	Not applicable	Unlimited reattacks	1 reattack
Zero-day vulnerabilities	None	Continuous zero-day vulnerability research	None
SLA	Availability	Accuracy, availability and response	Support
Min availability	>=99.95% per minute LTM	Same	99.5% per month
After-sale guarantees	No	Yes	Yes
Accreditations	CNA and Penetration Testing by CREST	Same	None
Hacker certifications	Not applicable	202 from 59 different types	Pending
Type of contract	Employee	Same	Employee
Endpoint control	Not applicable	Total	No information available
Channel control	Not applicable	Total	No information available
Standards	Some requirements from 65 standards, 18 in common and 47 additional	All requirements from the same standards	27 standards, 18 in common and 9 additional
Detection method	Automated tools	Automated tools, AI and human intelligence	Automated tools, AI and human intelligence
Remediation	5, 1 in common and 4 additional	Same, plus 1	1 in common
Outputs	5, 4 in common and 1 additional	Same, plus 2	4, all in common

Product

Attribute	Essential	Advanced	NowSecure
ASPM	Yes	Yes	No
API	GraphQL with JSON	Same	REST API with JSON
IDE	5 functionalities	Same, plus 1 functionality	No
CLI	Yes	Yes	Yes
CI/CD	Breaks the build	Same	Breaks the build
Vulnerability sources	14 sources	Same	No information available
Priority criteria	CVSS v4.0, CVSSF and EPSS	Same	CVSS
Custom prioritization	Pending	Pending	No
Scanner origin	In-house scanners	In-house scanners	In-house scanners
SCA	24 package managers	Same	Yes. No information available
SCA (AI models)	No	No	No
Reachability	12 languages	Same	No
Reachability type	Deterministic	Same	Not applicable
SBOM	22 package managers	Same	Yes. No information available
Malware detection	Yes	Yes	No
Autofix on components	No	No	No
Containers	4 distributions	Same	No
Source SAST (languages)	12, 3 in common and 12 additional	Same	4, 3 in common and 1 additional
Source SAST (frameworks)	22	Same	No information available
Custom rules	No	No	No
IaC	6	4	No
Binary SAST	1 type of binary in common	Same, plus 2 types of binaries, all in common	3 types of binaries, all in common
DAST	7 attack surface types, 3 in common and 4 additional	Same	3 attack surface types, all in common
API security Testing	No	3 types of APIs	Yes. No information available
IAST	No	No	Yes. No information available
CSPM	Yes	Yes	No
Environments	Left & Right (included)	Same	Left & Right
ASM	No	No	No
Secrets	15 secrets types	Same, plus verify other attack vectors and secrets exploitability	Yes. No information available
AI	3 functions, none in common	Same	2 functions, none in common
Open source	MPL-2.0 license. Totally equivalent to the paid version	Not applicable	No
Provisioning as Code	Yes	Yes	No
Deployment	SaaS	Same	SaaS and on-premises
Regions	US	Same	No information available
Status	Yes	Yes	Yes
Incidents	6 per year	Same	0.6 per year

Integrations

Attribute	Essential	Advanced	NowSecure
SCM	4	Same	None
Binary repositories	None	None	None
Ticketing	3, all in common	Same	4, 3 in common and 1 additional
ChatOps	None	None	1
IDE	2	Same	None
CI/CD	20, 6 in common and 29 additional	Same	6, all in common
SCA	Native	Same	Native and 1 integration
Container	Native	Same	None
SAST	Native	Same	Native and 2 integrations
DAST	Native	Same	Native
IAST	None	None	Native
Cloud	3	Same	None
CSPM	Native	Same	None
Secrets	Native	Same	Native
Remediation	None	None	None
Bug bounty	None	None	None
Vulnerability management	None	None	None
Compliance	None	None	None

References were last checked on Apr 25, 2025.

Free trial

Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.

Comparison between Fluid Attacks and NowSecure | Fluid Attacks

NowSecure