SOOS
How does Fluid Attacks' solution compare to SOOS's? The following comparison table
enables you to discern the performance of both providers across various attributes essential for meeting your
company's cybersecurity needs. To better understand each attribute, read their descriptions in the
dedicated page.
Organization
|
Attribute
|
Essential
|
Advanced
|
SOOS
|
|
Focus
|
|||
|
Extras
|
None
|
None
|
None
|
|
Headcount
|
|||
|
Headcount distribution
|
|||
|
Headcount growth
|
|||
|
Headquarters
|
|||
|
Countries
|
|||
|
Reputation
|
Same
|
9.59 from 41 reviews over 3 years
on G2
|
|
|
Followers
|
Same
|
||
|
Research firms
|
None
|
None
|
|
|
Founded
|
2001 | ||
|
Funding
|
Bootstrapped
|
Same
|
$6M
USD in 2 rounds from 1 investor
|
|
Acquisitions
|
None
|
None
|
None
|
|
Revenue
|
|||
|
CVE
|
257 CVEs reported to MITRE, ranked in the top 10 CVE labs
worldwide
|
0 CVEs reported to MITRE
|
|
|
Compliance
|
SOC 2 Type
II and SOC
3
|
SOC 2 Type II | |
|
Bug bounty
|
No
|
||
|
Visits
|
|||
|
Authority
|
|||
|
Vulnerability database
|
|||
|
Content
|
|||
|
Knowledge base
|
13 KB sections, 5 in common and 8 additional
|
5 KB sections, all in common
|
|
|
Community
|
No
|
||
|
Sync training
|
No
|
No
|
No
|
|
Async training
|
3 product use
courses, all free
|
No
|
|
|
Distribution
|
Same
|
||
| Marketplaces | Azure | ||
|
Freemium
|
No
|
No
|
No
|
|
Free trial
|
|||
|
Demo
|
|||
|
Pricing
|
|||
|
Pricing tiers
|
1 plan
|
1 plan
|
2 plans (core, plus). All transparent |
|
Minimum commit
|
|||
|
Minimum payment period
|
|||
|
Minimum capabilities
|
|||
|
Minimum scope
|
1 group
|
1 author | |
|
Pricing drivers
|
|||
|
Minimum monthly payment
|
Service
|
Attribute
|
Essential
|
Advanced
|
SOOS
|
|
PTaaS
|
No
|
No
|
|
|
Reverse engineering
|
No
|
Yes | No |
|
Secure code review
|
No
|
No
|
|
|
Pivoting
|
No
|
No
|
|
|
Exploitation
|
No
|
No
|
|
|
Manual reattacks
|
Not applicable
|
Not applicable
|
|
|
Zero-day vulnerabilities
|
None
|
Continuous zero-day vulnerability research
|
None
|
|
SLA
|
No | ||
|
Min availability
|
>=99.95%
per minute LTM
|
None | |
|
After-sale guarantees
|
No
|
Yes
|
No
|
|
Accreditations
|
None
|
||
|
Hacker certifications
|
Not applicable
|
Not applicable
|
|
|
Type of contract
|
Employee
|
Same
|
|
|
Endpoint control
|
Not applicable
|
Total
|
Not applicable
|
|
Channel control
|
Not applicable
|
Total
|
Not applicable
|
|
Standards
|
Some requirements from 65 standards, 8 in common and 57 additional
|
All requirements from the same standards
|
8 standards, all in common
|
|
Detection method
|
|||
|
False positives
|
7.38 times better
|
11.61 times better
|
8% F0.5 score per quantity
|
|
False negatives
|
12.36 times better
|
35.55 times better
|
2% F2.0 score per severity
|
|
Remediation
|
5, 2 in common and 3 additional
|
Same, plus 1
|
2, all in common
|
|
Outputs
|
5,
2 in common and
3 additional
|
Same, plus 2
|
4, 2 in
common and 2 additional
|
Product
|
Attribute
|
Essential |
Advanced
|
SOOS
|
|
ASPM
|
Yes | ||
|
API
|
GraphQL with JSON | ||
|
IDE
|
5 functionalities,
1 in common and 4 additional
|
Same,
plus 1 functionality
|
2 functionalities, 1 in common and 1 additional
|
|
CLI
|
|||
|
CI/CD
|
|||
|
Vulnerability sources
|
4 sources, 1 in common and 3 additional
|
2 sources, 1 in common and 1 additional
|
|
|
Priority criteria
|
|||
|
Custom prioritization
|
|||
|
Scanner origin
|
None
|
||
|
SCA
|
15 package
managers, 12 in common and 3 additional
|
||
|
AI security
|
No |
No
|
|
|
Reachability
|
12 languages
|
No
|
|
|
Reachability type
|
Not applicable
|
||
|
SBOM
|
Yes. No information
available
|
||
|
Malware detection
|
Yes |
Yes
|
No
|
|
Autofix on components
|
No
|
No
|
No
|
|
Containers
|
Yes. No
information available
|
||
|
Source SAST
(languages)
|
12,
10 in common and 2 additional
|
||
|
Source SAST
(frameworks)
|
22, 1 in common and 21
additional
|
3, 1 in common and 2 additional |
|
|
Custom rules
|
No
|
No
|
|
|
IaC
|
4 |
No
|
|
|
Binary SAST
|
1 type of
binary
|
Same, plus 2 types of
binaries
|
No
|
|
DAST
|
6 attack surface types, 4 in common and 2 additional |
||
|
API security testing
|
No
|
No
|
|
|
IAST
|
No
|
No
|
No
|
|
CSPM
|
Yes |
No
|
|
|
Environments
|
Left & Right (included)
|
Same
|
|
|
ASM
|
No
|
No |
No
|
|
Secrets
|
Same, plus verify other attack
vectors and secrets exploitability
|
Yes. No information
available
|
|
|
AI
|
No
|
||
|
Open-source
|
Not applicable
|
No
|
|
|
Provisioning as Code
|
Yes |
No
|
|
|
Deployment
|
|||
| Regions |
No information available
|
||
|
Status
|
|||
|
Incidents
|
No information available
|
Integrations
|
Attribute
|
Essential
|
Advanced
|
SOOS
|
|
SCM
|
4, all in
common
|
||
|
Binary repositories
|
None
|
None
|
None
|
|
Ticketing
|
3, 2 in
common and 1 additional
|
4, 2 in common and 2 additional |
|
|
ChatOps
|
None |
None
|
|
|
IDE
|
3, 1 in
common and 2 additional
|
1 in common |
|
|
CI/CD
|
20, 10 in common and 10
additional
|
11, 10 in common and 1
additional
|
|
|
SCA
|
|||
|
Container
|
|||
|
SAST
|
|||
|
DAST
|
|||
|
IAST
|
None |
None
|
None
|
|
Cloud
|
None
|
||
|
CSPM
|
None | ||
|
Secrets
|
|||
|
Remediation
|
None
|
None
|
None
|
|
Bug bounty
|
None
|
None
|
None
|
|
Vulnerability management
|
None
|
None
|
None
|
|
Compliance
|
None
|
None
|
References were last checked on Aug 29, 2025.
Free trial
Search for vulnerabilities in your apps for free with Fluid
Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which
includes the expertise of Fluid Attacks' hacking team, fill out this contact form.