Crashtest Security

Crashtest Security

4.6 out of 5 stars
Cyberlop

Cyberlop

Cyberlop Labs
+
+

Related Products

  • Aikido Security
    4.6 out of 5 stars 367 Ratings
    Visit Website for Aikido Security
  • Astra Pentest
    4.6 out of 5 stars 296 Ratings
    Visit Website for Astra Pentest
  • ESET PROTECT Advanced
    4.6 out of 5 stars 2,368 Ratings
    Visit Website for ESET PROTECT Advanced
  • DriveStrike
    4.8 out of 5 stars 25 Ratings
    Visit Website for DriveStrike
  • Rocket z/Assure VAP
    5.0 out of 5 stars 1 Rating
    Visit Website for Rocket z/Assure VAP
  • Criminal IP ASM
    4.9 out of 5 stars 21 Ratings
    Visit Website for Criminal IP ASM
  • ManageEngine Endpoint Central
    4.6 out of 5 stars 3,409 Ratings
    Visit Website for ManageEngine Endpoint Central
  • NinjaOne
    4.7 out of 5 stars 6,907 Ratings
    Visit Website for NinjaOne
  • Kitecyber
    4.9 out of 5 stars 89 Ratings
    Visit Website for Kitecyber
  • Google Cloud Run
    4.5 out of 5 stars 352 Ratings
    Visit Website for Google Cloud Run

About

Crashtest Security is a SaaS-based security vulnerability scanner allowing agile development teams to ensure continuous security before even hitting Production. Our state-of-the-art dynamic application security testing (DAST) solution integrates seamlessly with your dev environment and protects multi-page and JavaScript apps, as well as microservices and APIs. Set up Crashtest Security Suite in minutes, get advanced crawling options, and automate your security. Whether you want to see vulnerabilities within the OWASP Top 10 or you want to go for deep scans, Crashtest Security is here to help you stay on top of your security and protect your code and customers.

About

Cyberlop is a web application and API security testing platform for product and security teams and security agencies. It tests live applications in black-box and grey-box modes and can inspect connected source code while exercising the running application. Teams can provide accounts for different roles so scans assess authorization boundaries and access to pages, APIs, and records. Confirmed findings include request and response evidence, browser screenshots, and source file and line details when code is connected. Teams can rerun tests after making changes to check whether vulnerabilities remain. Cyberlop supports scheduled scans, CI/CD gating through an API and GitHub Actions template, repository connections, access controls, and exportable reports. Testing requires target-owner authorization. The hosted platform can use a scanning agent installed inside a customer's network; its console and reports remain hosted.

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Supported
Linux Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Companies of all sizes

Audience

Software companies, SaaS and fintech teams, agencies and MSSPs that ship web apps and APIs

Support

Phone Support Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Supported

API

Offers API Supported

Screenshots and Videos

Screenshots and Videos

No images available

Pricing

€35 per month
Free 14 Day Trial with Flexible Pricing to suit your requirements
Free Version Supported
Free Trial Supported

Pricing

$199/pilot
A 30-day pilot for one application is $199, credited toward an annual license if converted. Annual licenses are $699 per application, billed yearly, with unlimited scans; the founding rate is available through February 28, 2027 and is locked for two years from signing. From March 1, 2027, new annual licenses are $1,199 per application. Private agent execution is $944 per application per year. Prices exclude 18% GST for customers invoiced in India.
Free Version Not Supported
Free Trial Supported

Reviews/Ratings

Overall 4.6 / 5
ease 4.6 / 5
features 4.2 / 5
design 4.2 / 5
support 5.0 / 5

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Pros & Cons from Real Users

Pros

  • As Information security/Data Privacy manager we wanted a product that would help us identify security vulnerabilities and provide recommendations on how to eliminate them. Crashtest does that on several levels, from scanning the requests to checking the headers and then trying to actually penetrate systems change/destroy data in a very clever way. Support staff very helpful, responsive and friendly. This product can be integrated with so many CI/CD tools and with a bit of configuration it is easy to automate and integrate to almost any system and Notify/prevent security vulnerabilities from reaching areas they should not.
  • Crashtest Security provides a great vulnerability detection while it is very easy to setup and use. It detects vulnerabilities such as SQL Injections or Code Execution from a blackbox point of view. So I can really see, how attackers view my web applications from the outside. We have integrated it our processes and get Mattermost notifications regarding our scan results.
  • - Very easy setup - Provides solutions for findings with the help of a wiki - Generates an easy to read scan result (even for non tech people) - Very friendly support
  • The solution is easy to setup. The UI is mostly clean. The solution provides a helpful findings wiki.
  • - Easy to set up and integrate. - Performs a wide range of scans and scanning scenarios. - User friendly scan results.

Cons

  • As a new system, Crashtest had some issues when we started using it, but the support team was very responsive in fixing any issues we encountered. If I have to be picky, the one thing I would raise is that there is a bit of room to improve performance.
  • Some features (such as configuring scanning for networks not reachable from the internet) are not yet available as self service functionality using the web frontend. However, the Crashtest Security support was very friendly and eager to support us with the setup.
  • - many pages cant be opened in a new tab - sometimes the scanner cant login to our application, a manual restart fixes the problem
  • Product is not 100 % stable yet. Sometimes duplicated findings occur. The JavaScript-built UI is not always easy or reliable to navigate (open in new tab is not possible for many pages).
  • As of today, I couldn't observe any disadvantages.

Training

Documentation Supported
Webinars Supported
Live Online Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

Crashtest Security
Founded: 2017
Germany
crashtest-security.com

Company Information

Cyberlop Labs
Founded: 2026
India
cyberlop.com

Alternatives

VulnSign

VulnSign

5.0 out of 5 stars

Alternatives

Aikido Security

Aikido Security

4.6 out of 5 stars
Invicti Web + API

Invicti Web + API

Invicti Security
4.0 out of 5 stars
Vooki Pro

Vooki Pro

Vooki Infosec Pvt Ltd
Aikido Security

Aikido Security

4.6 out of 5 stars
WebScanner

WebScanner

DefenseCode
PT Application Inspector

PT Application Inspector

Positive Technologies
Invicti

Invicti

Invicti Security
4.8 out of 5 stars
AppScan

AppScan

HCLSoftware
4.0 out of 5 stars

Categories

Categories

Endpoint Protection Features

Activity Log Not Supported
Antivirus Not Supported
Application Security Supported
Behavioral Analytics Not Supported
Device Management Not Supported
Encryption Not Supported
Signature Matching Not Supported
Web Threat Management Supported
Whitelisting / Blacklisting Not Supported

Vulnerability Management Features

Asset Discovery Not Supported
Asset Tagging Not Supported
Network Scanning Not Supported
Patch Management Not Supported
Policy Management Not Supported
Prioritization Not Supported
Risk Management Not Supported
Vulnerability Assessment Supported
Web Scanning Supported

Vulnerability Scanners Features

Asset Discovery Not Supported
Black Box Scanning Supported
Compliance Monitoring Supported
Continuous Monitoring Supported
Defect Tracking Not Supported
Interactive Scanning Not Supported
Logging and Reporting Supported
Network Mapping Not Supported
Perimeter Scanning Not Supported
Risk Analysis Supported
Threat Intelligence Supported
Web Inspection Not Supported

Integrations

GitHub Supported
GitLab Supported
Azure DevOps Supported
Azure Key Vault Not Supported
Bamboo Supported
CircleCI Supported
Discord Supported
Faraday Supported
GitHub Actions Not Supported
Google Cloud Build Supported
Google Hangouts Supported
Heroku Supported
Jenkins Supported
Jira Work Management Supported
Mattermost Supported
Microsoft Teams Supported
Okta Not Supported
Slack Supported
Travis CI Supported

Integrations

GitHub Supported
GitLab Supported
Azure DevOps Not Supported
Azure Key Vault Supported
Bamboo Not Supported
CircleCI Not Supported
Discord Not Supported
Faraday Not Supported
GitHub Actions Supported
Google Cloud Build Not Supported
Google Hangouts Not Supported
Heroku Not Supported
Jenkins Not Supported
Jira Work Management Not Supported
Mattermost Not Supported
Microsoft Teams Not Supported
Okta Supported
Slack Not Supported
Travis CI Not Supported
Claim Crashtest Security and update features and information
Claim Crashtest Security and update features and information
Claim Cyberlop and update features and information
Claim Cyberlop and update features and information