Average Ratings 5 Ratings
Average Ratings 0 Ratings
Description
Crashtest Security, a SaaS-based security vulnerability scanner, allows agile development teams to ensure continuous security even before reaching Production.
Our state-of the-art dynamic application security test (DAST), integrates seamlessly into your development environment and protects multipage and JavaScript applications, as well microservices and APIs.
Crashtest Security Suite can be set up in minutes. You will also have advanced crawling options and the ability to automate your security. Crashtest Security can help you keep your code and customers safe by allowing you to see vulnerabilities in the OWASP Top 10.
Description
A dynamic application security testing solution that combines robust analytics with exceptional usability. This web application assessment leverages cutting-edge technologies such as HTML5 and Ajax. It can replicate the vulnerability exploitation process by tracking events, while automatically scanning subdirectories linked to a web application's URL. The system identifies security flaws from the URLs it crawls and performs open-source web library vulnerability assessments. Additionally, it integrates with Sparrow's analytical tools to address the shortcomings found in traditional DAST methods. The TrueScan module enhances detection capabilities through IAST integration, and its web-based interface allows for seamless access without the need for installation.
The centralized management system facilitates the organization and sharing of analysis results effectively. By utilizing browser event replay technology, it further identifies vulnerabilities in web applications. This solution also addresses the constraints of dynamic analysis through its collaboration with Sparrow SAST and RASP, while the IAST functionality via TrueScan enhances the overall security assessment process even further. As a comprehensive tool, it exemplifies the future of web application security testing.
API Access
Has API
Yes
API Access
Has API
No
Integrations
Azure DevOps
Yes
Bamboo
Yes
Bitbucket
Yes
CircleCI
Yes
CodeShip
Yes
DefectDojo
Yes
Discord
Yes
Faraday
Yes
GitHub
Yes
GitLab
Yes
Integrations
Azure DevOps
No
Bamboo
No
Bitbucket
No
CircleCI
No
CodeShip
No
DefectDojo
No
Discord
No
Faraday
No
GitHub
No
GitLab
No
Pricing Details
€35 per month
Free 14 Day Trial with Flexible Pricing to suit your requirements
Free Trial
Yes
Free Version
Yes
Pricing Details
one-time payment
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Crashtest Security
Founded
2017
Country
Germany
Website
crashtest-security.com
Vendor Details
Company Name
Sparrow
Founded
2018
Country
South Korea
Website
www.sparrowfasoo.com/en/product/dast
Product Features
Endpoint Protection
Activity Log
No
Antivirus
No
Application Security
Yes
Behavioral Analytics
No
Device Management
No
Encryption
No
Signature Matching
No
Web Threat Management
Yes
Whitelisting / Blacklisting
No
Vulnerability Management
Asset Discovery
No
Asset Tagging
No
Network Scanning
No
Patch Management
No
Policy Management
No
Prioritization
No
Risk Management
No
Vulnerability Assessment
Yes
Web Scanning
Yes
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
Yes
Compliance Monitoring
Yes
Continuous Monitoring
Yes
Defect Tracking
No
Interactive Scanning
No
Logging and Reporting
Yes
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
Yes
Threat Intelligence
Yes
Web Inspection
No
Product Features
Application Security
Analytics / Reporting
No
Open Source Component Monitoring
No
Source Code Analysis
No
Third-Party Tools Integration
No
Training Resources
No
Vulnerability Detection
No
Vulnerability Remediation
No