Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

ImmuniWeb is a worldwide application security company. ImmuniWeb's headquarter is located in Geneva, Switzerland. Most of ImmuniWeb's customers come from banking, healthcare, and e-commerce. ImmuniWeb® AI Platform leverages award-winning AI and Machine Learning technology for acceleration and intelligent automation of Attack Surface Management and Dark Web Monitoring. ImmuniWeb also is a Key Player in the Application Penetration Testing market (according to MarketsandMarkets 2021 report). ImmuniWeb offers a contractual zero false-positives SLA with a money-back guarantee. ImmuniWeb’s AI technology is a recipient of numerous awards and recognitions, including Gartner Cool Vendor, IDC Innovator, and the winner of “SC Award Europe” in the “Best Usage of Machine Learning and AI” category. ImmuniWeb® Community Edition runs over 100,000 daily tests, being one of the largest application security communities. ImmuniWeb offers the following free tests: Website Security Test, SSL Security Test, Mobile App Security Test, Dark Web Exposure Test. ImmuniWeb SA is an ISO 27001 certified and CREST-accredited company.

Description

Operator by Planck Proof is a powerful API penetration testing tool designed for agentic use. By providing your OpenAPI specification along with credentials for multiple roles, it meticulously examines every operation related to those roles and tenants for potential authorization issues such as BOLA, BFLA, and BOPLA, along with other vulnerabilities like broken authentication, injection flaws, mass assignment, and business-logic exploitation, linking these findings to form potential attack paths. Its comprehensive coverage aligns with the OWASP API Security Top 10 and encompasses various types of APIs including REST, GraphQL, and gRPC, as well as those utilized by AI agents, LLM applications, and MCP servers. Each identified vulnerability comes complete with the specific request and response details, a CVSS score, and a runnable proof-of-concept that your engineering team can utilize to validate the existence of the issue and confirm any necessary fixes. Additionally, the tool incorporates scope, rate, and data controls to ensure the safety of operations within live environments, allowing users to direct or halt the testing agent whenever needed. You can implement it with every deployment, re-evaluate fixes, and seamlessly transfer findings to Jira for tracking. Comprehensive reports are tailored for both engineers and auditors, ensuring compliance with standards such as SOC 2, PCI DSS, and HIPAA. The initial scan is complimentary, while Pro and Enterprise pricing is determined based on the volume of API endpoints tested. This flexibility allows organizations to choose a plan that best suits their testing needs.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

No images available

Integrations

Barracuda CloudGen Firewall Yes 
Fortinet FortiWeb Web Application Firewall Yes 
Imperva Application Security Platform Yes 
Qualys TruRisk Platform Yes 
Qualys WAS Yes 

Integrations

Barracuda CloudGen Firewall No 
Fortinet FortiWeb Web Application Firewall No 
Imperva Application Security Platform No 
Qualys TruRisk Platform No 
Qualys WAS No 

Pricing Details

$499/month
From $499/month
Free Trial Yes 
Free Version No 

Pricing Details

$0
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App Yes 
iPad App Yes 
Android App Yes 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

ImmuniWeb

Founded

2019

Country

Switzerland

Website

www.immuniweb.com

Vendor Details

Company Name

Planck Proof

Founded

2026

Country

United States

Website

planckproof.ai

Product Features

Application Security

Analytics / Reporting Yes 
Open Source Component Monitoring Yes 
Source Code Analysis Yes 
Third-Party Tools Integration Yes 
Training Resources Yes 
Vulnerability Detection Yes 
Vulnerability Remediation Yes 

Audit

Alerts / Notifications No 
Audit Planning No 
Compliance Management Yes 
Dashboard No 
Exceptions Management No 
Forms Management No 
Issue Management No 
Mobile Access No 
Multi-Year Planning No 
Risk Assessment Yes 
Workflow Management No 

Automated Testing

Hierarchical View No 
Move & Copy No 
Parameterized Testing No 
Requirements-Based Testing No 
Security Testing Yes 
Supports Parallel Execution No 
Test Script Reviews No 
Unicode Compliance No 

Cloud Security

Antivirus No 
Application Security Yes 
Behavioral Analytics Yes 
Encryption No 
Endpoint Management No 
Incident Management No 
Intrusion Detection System No 
Threat Intelligence Yes 
Two-Factor Authentication No 
Vulnerability Management Yes 

Cybersecurity

AI / Machine Learning Yes 
Behavioral Analytics Yes 
Endpoint Management Yes 
IOC Verification No 
Incident Management Yes 
Tokenization No 
Vulnerability Scanning Yes 
Whitelisting / Blacklisting Yes 

IT Security

Anti Spam No 
Anti Virus No 
Email Attachment Protection No 
Event Tracking No 
IP Protection No 
Internet Usage Monitoring No 
Intrusion Detection System Yes 
Spyware Removal Yes 
Two-Factor Authentication No 
Vulnerability Scanning Yes 
Web Threat Management Yes 
Web Traffic Reporting No 

Vulnerability Management

Asset Discovery Yes 
Asset Tagging Yes 
Network Scanning Yes 
Patch Management Yes 
Policy Management No 
Prioritization No 
Risk Management Yes 
Vulnerability Assessment Yes 
Web Scanning Yes 

Product Features

Alternatives

Red Sift ASM Reviews

Red Sift ASM

Red Sift

Alternatives

Strobes Reviews

Strobes

Strobes Security
ZeroThreat.ai Reviews

ZeroThreat.ai

ZeroThreat Inc.
Penligent Reviews

Penligent

Penligent.ai