Detectify

Name: Detectify
Brand: Detectify

Advanced application security testing for evolving attack surface coverage. Go hack yourself.

Est 2013|Valuation $78.2M|Raised $45.9M|7 Ref Customers

LinkedIn 12K|Web traffic 27K|FTEs 60|HQ Stockholm, Stockholm County, SE

MarketsVulnerability Management Application Security Testing (AST)

01Competitive Landscape

Narrative analysis

Detectify vs. Invicti/Acunetix - Detectify emphasizes an approach that converts researcher-submitted findings into automated tests and focuses on external attack surface coverage. - Invicti/Acunetix emphasize proof-based scanning and enterprise workflow integrations; product documentation from both vendors should be examined in POCs for feature parity. Detectify vs. Intruder - Vendor comparisons indicate differences in detection methodology and packaging. Detectify notes it lacks an on-prem/agent solution, which is material depending on deployment requirements. Independent validation is advised. Burp Suite Enterprise Edition as an alternative/complement - Burp Suite Enterprise is commonly used when organizations require the Burp scanning engine and also plan to integrate manual testing workflows. Procurement typically requires a quote due to variable pricing structures.

Market share and adoption trends

No authoritative analyst market share data was located in the reviewed materials. Adoption signals in the captured materials are primarily vendor-claimed.

	Detectify	Rapid7 InsightAppSec	Intruder
Starting Price	Application Scanning: starting in the low-hundreds per month; Surface Monitoring: priced based on asset tiers (vendor list prices)	Starting pricing presented at a mid-hundreds-per-month magnitude (billed annually, per vendor materials)	Public pricing pages are available; enterprise pricing is quoted separately
Best For	AppSec teams requiring external attack surface discovery plus DAST and a hacker-contributed test library	Organizations seeking a mainstream DAST platform with cloud and on-prem scan engines	Organizations seeking vulnerability scanning combined with monitoring and broader infrastructure coverage
Key Strength	External attack surface discovery and payload-based testing supplemented by an ethical-hacker contributed test library	Integration within a broader security platform and availability of cloud and on-prem scanning engines	Simpler setup and broad scanning across infrastructure (according to vendor materials)
Key Weakness	Gaps reported for some modern technologies (e.g., GraphQL) and lack of on-prem/agent scanning	Pricing and packaging complexity; platform overhead for some buyers	Depth of web application testing and reliance on signatures may be limitations (requires validation)

01Competitive Landscape

Narrative analysis

Detectify vs. Invicti/Acunetix

Detectify emphasizes an approach that converts researcher-submitted findings into automated tests and focuses on external attack surface coverage.
Invicti/Acunetix emphasize proof-based scanning and enterprise workflow integrations; product documentation from both vendors should be examined in POCs for feature parity.

Detectify vs. Intruder

Vendor comparisons indicate differences in detection methodology and packaging. Detectify notes it lacks an on-prem/agent solution, which is material depending on deployment requirements. Independent validation is advised.

Burp Suite Enterprise Edition as an alternative/complement

Burp Suite Enterprise is commonly used when organizations require the Burp scanning engine and also plan to integrate manual testing workflows. Procurement typically requires a quote due to variable pricing structures.

Market share and adoption trends

No authoritative analyst market share data was located in the reviewed materials. Adoption signals in the captured materials are primarily vendor-claimed.

	Detectify	Rapid7 InsightAppSec	Intruder
Starting Price	Application Scanning: starting in the low-hundreds per month; Surface Monitoring: priced based on asset tiers (vendor list prices)	Starting pricing presented at a mid-hundreds-per-month magnitude (billed annually, per vendor materials)	Public pricing pages are available; enterprise pricing is quoted separately
Best For	AppSec teams requiring external attack surface discovery plus DAST and a hacker-contributed test library	Organizations seeking a mainstream DAST platform with cloud and on-prem scan engines	Organizations seeking vulnerability scanning combined with monitoring and broader infrastructure coverage
Key Strength	External attack surface discovery and payload-based testing supplemented by an ethical-hacker contributed test library	Integration within a broader security platform and availability of cloud and on-prem scanning engines	Simpler setup and broad scanning across infrastructure (according to vendor materials)
Key Weakness	Gaps reported for some modern technologies (e.g., GraphQL) and lack of on-prem/agent scanning	Pricing and packaging complexity; platform overhead for some buyers	Depth of web application testing and reliance on signatures may be limitations (requires validation)