Detectify
by Detectify
Cloud platform for surface monitoring, web application scanning and API scanning, with a free Starter tier.
About
Cloud platform for surface monitoring, web application scanning and API scanning, with a free Starter tier.
Detectify provides application security, API and attack surface monitoring tools for engineering teams. The platform includes REST and GraphQL API scanning, advanced discovery by IP range and apex domain, CI/CD integration, white-labeled scan reports and optional PCI ASV scanning.
Standard surface monitoring and application scanning are cloud-based. Dedicated local network agents handle scanning behind a firewall or internal CI/CD pipelines, and it is also available through AWS Marketplace. SSO is supported via Okta, Ping Identity, OneLogin and SAML 2.0. Plans run from a free Starter tier to Enterprise at annual platform fees.
Key features
Product details
Vendor
Detectify
Category
Application & API Security
Pricing model
freemium
Starting price
Starter EUR 0; Standard from EUR 2,500 per year
Free trial
Yes
Deployment
Cloud; local network agents for internal scanning; AWS Marketplace
Company size
Teams from small (Starter, up to 5 users) to enterprise (unlimited users)
Pricing
Pricing model: freemium
Plans
- Starter: from EUR 0 annual platform fee, up to 5 users, 1 team; Standard: from EUR 2,500 annual platform fee, up to 10 users; Professional: from EUR 5,000 annual platform fee, unlimited users across 2 teams; Enterprise: from EUR 15,000 annual platform fee, unlimited users and teams
Similar software
42Crunch
by 42Crunch
API security platform that applies contract driven security assessment, vulnerability testing and runtime protection to APIs and to the MCP servers used by AI agents.
Aikido Security
by Aikido Security
Developer-focused AppSec suite covering code, cloud and runtime with SAST, SCA, DAST and secrets detection.
Akamai API Security
by Akamai Technologies
API security product from Akamai that gives visibility into an organization's full API estate with continuous detection and analysis, from development through production.
Barracuda WAF-as-a-Service
by Barracuda Networks
Cloud-delivered WAF with API protection, bot defense and unmetered L3-L7 DDoS protection.
Black Duck Polaris
by Black Duck
Cloud-native AppSec platform unifying SAST, SCA, DAST, IaC analysis and secrets detection.
Burp Suite Professional
by PortSwigger
Web security testing toolkit for penetration testers, with a proxy, scanner, Intruder and an extension store.
