+
+

Related Products

  • Aikido Security
    239 Ratings
    Visit Website
  • Parasoft
    150 Ratings
    Visit Website
  • Checksum.ai
    1 Rating
    Visit Website
  • MuukTest
    34 Ratings
    Visit Website
  • Rocket z/Assure VAP
    1 Rating
    Visit Website
  • Bright Data
    1,418 Ratings
    Visit Website
  • Gearset
    305 Ratings
    Visit Website
  • ToogleBox
    85 Ratings
    Visit Website
  • Astra Pentest
    295 Ratings
    Visit Website
  • Virtuoso QA
    131 Ratings
    Visit Website

About

Bright Security is a developer-centric Dynamic Application Security Testing (DAST) solution that helps organizations ship secure applications and APIs quickly and cost-effectively. Its approach enables quick and iterative scans to identify critical security vulnerabilities early in the SDLC without compromising on quality or delivery speed. Bright empowers AppSec teams to provide governance for securing APIs and web apps while allowing developers to take ownership of security testing and remediation work. Unlike legacy DAST solutions built for AppSec professionals, which are complex to deploy and find vulnerabilities late in the development process, Bright's DAST solution is optimized for the DevOps world. It can be deployed as early as the Unit Testing phase and run throughout the SDLC, learning and optimizing from every scan. By enabling organizations to detect and remediate vulnerabilities early in the SDLC, Bright reduces risk at a lower cost and effort.

About

Crashtest Security is a SaaS-based security vulnerability scanner allowing agile development teams to ensure continuous security before even hitting Production. Our state-of-the-art dynamic application security testing (DAST) solution integrates seamlessly with your dev environment and protects multi-page and JavaScript apps, as well as microservices and APIs. Set up Crashtest Security Suite in minutes, get advanced crawling options, and automate your security. Whether you want to see vulnerabilities within the OWASP Top 10 or you want to go for deep scans, Crashtest Security is here to help you stay on top of your security and protect your code and customers.

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Audience

Security teams interested in a powerful developer-centric Dynamic Application Security Testing (DAST) solution

Audience

Companies of all sizes

Support

Phone Support
24/7 Live Support
Online

Support

Phone Support
24/7 Live Support
Online

API

Offers API

API

Offers API

Screenshots and Videos

Screenshots and Videos

Pricing

Contact us for pricing
Free Version
Free Trial

Pricing

€35 per month
Free 14 Day Trial with Flexible Pricing to suit your requirements
Free Version
Free Trial

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 4.6 / 5
ease 4.6 / 5
features 4.2 / 5
design 4.2 / 5
support 5.0 / 5

Pros & Cons from Real Users

Pros

  • As Information security/Data Privacy manager we wanted a product that would help us identify security vulnerabilities and provide recommendations on how to eliminate them. Crashtest does that on several levels, from scanning the requests to checking the headers and then trying to actually penetrate systems change/destroy data in a very clever way. Support staff very helpful, responsive and friendly. This product can be integrated with so many CI/CD tools and with a bit of configuration it is easy to automate and integrate to almost any system and Notify/prevent security vulnerabilities from reaching areas they should not.
  • Crashtest Security provides a great vulnerability detection while it is very easy to setup and use. It detects vulnerabilities such as SQL Injections or Code Execution from a blackbox point of view. So I can really see, how attackers view my web applications from the outside. We have integrated it our processes and get Mattermost notifications regarding our scan results.
  • - Very easy setup - Provides solutions for findings with the help of a wiki - Generates an easy to read scan result (even for non tech people) - Very friendly support
  • The solution is easy to setup. The UI is mostly clean. The solution provides a helpful findings wiki.
  • - Easy to set up and integrate. - Performs a wide range of scans and scanning scenarios. - User friendly scan results.

Cons

  • As a new system, Crashtest had some issues when we started using it, but the support team was very responsive in fixing any issues we encountered. If I have to be picky, the one thing I would raise is that there is a bit of room to improve performance.
  • Some features (such as configuring scanning for networks not reachable from the internet) are not yet available as self service functionality using the web frontend. However, the Crashtest Security support was very friendly and eager to support us with the setup.
  • - many pages cant be opened in a new tab - sometimes the scanner cant login to our application, a manual restart fixes the problem
  • Product is not 100 % stable yet. Sometimes duplicated findings occur. The JavaScript-built UI is not always easy or reliable to navigate (open in new tab is not possible for many pages).
  • As of today, I couldn't observe any disadvantages.

Training

Documentation
Webinars
Live Online
In Person

Training

Documentation
Webinars
Live Online
In Person

Company Information

Bright Security
Founded: 2018
Israel
brightsec.com

Company Information

Crashtest Security
Founded: 2017
Germany
crashtest-security.com

Alternatives

Alternatives

AppScan

AppScan

HCLSoftware
PT Application Inspector

PT Application Inspector

Positive Technologies
Invicti

Invicti

Invicti Security
Acunetix

Acunetix

Invicti Security

Categories

Categories

Endpoint Protection Features

Activity Log
Antivirus
Application Security
Behavioral Analytics
Device Management
Encryption
Signature Matching
Web Threat Management
Whitelisting / Blacklisting

Vulnerability Management Features

Asset Discovery
Asset Tagging
Network Scanning
Patch Management
Policy Management
Prioritization
Risk Management
Vulnerability Assessment
Web Scanning

Vulnerability Scanners Features

Asset Discovery
Black Box Scanning
Compliance Monitoring
Continuous Monitoring
Defect Tracking
Interactive Scanning
Logging and Reporting
Network Mapping
Perimeter Scanning
Risk Analysis
Threat Intelligence
Web Inspection

Integrations

Azure DevOps
Bamboo
Bitbucket
CircleCI
CodeShip
DefectDojo
Discord
Faraday
GitHub
GitLab
Google Cloud Build
Google Hangouts
Heroku
Jenkins
Jira Work Management
Mattermost
Microsoft Teams
Slack
Travis CI

Integrations

Azure DevOps
Bamboo
Bitbucket
CircleCI
CodeShip
DefectDojo
Discord
Faraday
GitHub
GitLab
Google Cloud Build
Google Hangouts
Heroku
Jenkins
Jira Work Management
Mattermost
Microsoft Teams
Slack
Travis CI
Claim Bright Security and update features and information
Claim Bright Security and update features and information
Claim Crashtest Security and update features and information
Claim Crashtest Security and update features and information