Fluid Attacks Alternatives

Our overall experience with Veracode has been very positive. The platform helps us strengthen application security across multiple stages of development by identifying vulnerabilities early in the SDLC. Integration with CI/CD pipelines makes security testing more efficient and reduces manual efforts for developers. The dashboard and reporting features provide good visibility into security posture and remediation progress. Overall, it has been a reliable and valuable solution for improving secure development practices.

The overall experience with CheckmarX has been truly exceptional. The vendor has been very supportive of us throughout the implementation and post-implementation phases, addressing our concerns promptly and smoothly. They also consistently share updates and newly added features, taking time to explain them clearly to our team. CheckmarX's SAST solution is reliable and suited for development and security teams looking to integrate security seamlessly into their process. More importantly, it plays a critical or crucial role in strengthening our application security by identifying vulnerabilities in the early development cycle, reducing risk, and ensuring that our product or application is secure and compliant.

We have engaged AppKnox for our app vulnerability assessment and VAPT requirements, and the overall experience has been structured and professional. Their team has been responsive from onboarding through report delivery and retesting. AppKnox's automated vulnerability assessment (SAST/DAST/API) combined with manual penetration testing produced detailed, actionable reports that helped our engineering team prioritize and remediate issues efficiently. Revalidation after fixes was handled promptly.

HCL AppScan has significantly enhanced our application security testing process and it's become an essential part of our day-to-day activities. It provides comprehensive and customizable AST reports, enabling us to scan apps throughout the development lifecycle and identify vulns early. The platform is robust and supports scans at scale.

We use GitLab mainly for source code management, CI/CD pipelines, and collaboration between development teams. Having repository management, pipelines, and issue tracking in one platform helps simplify the development workflow and reduces the need for multiple separate tools. The CI/CD integration works well and is flexible enough for different deployment scenarios. Merge request and branch management features also help improve collaboration during development. Initial setup was relatively straightforward, although optimizing runners and pipelines required some tuning depending on the environment. One challenge is that some advanced features have a learning curve, especially for teams that are new to DevOps practices. Pipeline troubleshooting can also become difficult when configurations grow more complex.

After moving some of our toolsets around, we had a gap related to web app scanning. We slide Invicti into place and it has been an awesome product, with no major issues. It was straightward to set up, and it's easily been a "fire and forget" kind of tool, as we automate pulling the reports.

The project manager and technical resource dedicated to our account is amazing. They anticipate our needs, assist us with implementation, answer every question asked, and are extremely professional.

Good quality software and very good communication with the support team to address issues.