Vulnerability Scanning & Code Security
4.4/5.0
VerifiedFreeLast technical review:
Markdown for AI (.md)

Detectify

Application security platform combining DAST and attack surface management.

Pricing

$0/mo

Free
Score

4.4/5

Certifications
2
Last technical review
2026-10-30
Available plansVisit website (opens in a new tab)

Technical Overview

Detectify is an application security platform built for development and operations teams combining dynamic application security testing (DAST) with external attack surface management (EASM). Powered by real-world hacker research at scale, it discovers exposed assets and tests REST and GraphQL APIs. Deployed as a cloud SaaS and billed via tiered annual or monthly subscriptions.

Analyst Evaluation: Pros and Limitations

Verified Advantages

  • Crowdsourced hacker research integrated directly into testing rules.
  • Simultaneous coverage of REST and GraphQL APIs alongside traditional DAST.
  • Continuous automated discovery of external attack surface assets.

Technical Considerations

  • Higher-tier plans and advanced governance features carry significant costs.
  • Lack of fully self-hosted deployment options for air-gapped environments.

Technical Capabilities & Features

5/7
Included:REST & GraphQL API
Included:SSO / SAML Authentication
Not available:Self-Hosted Option
Included:Full Data Export
Included:Role-Based Access Control (RBAC)
Not available:Custom Domains & SSL
Included:Immutable Audit Logs
Scorecard
Show detailsHide details

Technical Scorecard: Detectify

85/100
DX & Tech Documentation
Excellent
85/100
Pricing Fairness
Excellent
80/100
Security & Governance
Excellent
90/100
Data Portability & Sovereignty
Excellent
80/100
Performance & Reliability
Excellent
90/100

Time to Value & Fit by Segment: Detectify

Estimated Time-to-Value< 1 hour (Immediate)

Near-instantaneous deployment with minimal technical friction.

Learning CurveModerate (Standard)

Requires consulting technical documentation and basic credentials setup.

Fit Index by Organization Size

Startup & Agile Teams1 to 50 members
80%
Mid-Market & Scaleup50 to 500 members
90%
Corporate Enterprise500+ members
85%
Pricing & TCO
Show detailsHide details

Pricing

$0.00/mo

Model: FREE.

Available plans:

  • Starter$0/mo

Free Tier Verification:

  • No credit card required
  • Commercial use allowed
  • Monthly recurring quota reset
  • No mandatory watermarks
Get Detectify (opens in a new tab)

Billing Risks & Hidden Clauses: Detectify

Free Tier Limits:

Starter plan includes up to 5 users and basic API scanning capabilities with a zero annual platform fee baseline.

Audited Billing Critical Points:
  • Enterprise tiers require custom quotes that significantly increase baseline platform expenses.

"Starter from €0 annual platform fee Up to 5 users 1 team Great for devs and hackers."

Verified Quote: /pricing
Total Cost of Ownership (TCO) Projection: Detectify$0.00/mo
Deterministic cost estimation at 12 and 36 months based on team size, including SSO tax premiums and annual prepay discounts.
Show detailsHide details
Licensing Cost (1 to 100+ seats)
$0/forever
Unlimited team members with zero penalties
SSO Tax (SAML Enterprise)
$0no surcharge
No artificial security barriers
3-Year Investment (Software TCO)
$0total
operates under a zero-cost or open-source model. Licensing TCO is identical:
Usage Surcharges & Bill Shock Simulator: DetectifyWhat usage costs as you scale
Detect overage penalties before they impact engineering budget.
Show detailsHide details

Prototype / MVP (10 GB)

Included base quota in plan: 10 GB.
Low Risk / Predictable Bill
Base Monthly Rate
$0/mo
Fixed subscription or contracted tier
Overage Penalty
$0/month extra
Usage covered within plan quota
Estimated Monthly Invoice
$0/mo
Total monthly cost before taxes
Technical Mitigation Recommendation:

Suitable for development; verify concurrent connection limits.

Base Production (50 GB)

Included base quota in plan: 50 GB.
Low Risk / Predictable Bill
Base Monthly Rate
$0/mo
Fixed subscription or contracted tier
Overage Penalty
$0/month extra
Usage covered within plan quota
Estimated Monthly Invoice
$0/mo
Total monthly cost before taxes
Technical Mitigation Recommendation:

Implement table compression policies and temporal partitioning.

Active Growth (250 GB)

Included base quota in plan: 250 GB.
Low Risk / Predictable Bill
Base Monthly Rate
$0/mo
Fixed subscription or contracted tier
Overage Penalty
$0/month extra
Usage covered within plan quota
Estimated Monthly Invoice
$0/mo
Total monthly cost before taxes
Technical Mitigation Recommendation:

Offload cold backups to standard object storage (S3).

Large Scale (1.000 GB (1 TB))

Included base quota in plan: 1,000 GB.
Low Risk / Predictable Bill
Base Monthly Rate
$0/mo
Fixed subscription or contracted tier
Overage Penalty
$0/month extra
Usage covered within plan quota
Estimated Monthly Invoice
$0/mo
Total monthly cost before taxes
Technical Mitigation Recommendation:

Migrate to dedicated instance or self-hosted cluster to curtail I/O fees.

Security & Data Exit
Show detailsHide details

Compliance & Security Standards: Detectify

SOC 2 Type IIAudited
ISO 27001Not reported
GDPR / RGPDAudited
HIPAANot reported
PCI-DSSNot reported
Jurisdiction & Legal Sovereignty
🇸🇪Sweden [SE]Subject to US CLOUD ActGDPR DPA Available
SSO Availability (SAML Enterprise)
Enterprise-Only SSO
Data Residency
EUUSAWS
AI Privacy Policy
Zero customer data retention
Data Liberation & Migration Runbook: DetectifyJSON · CSV · PDF
Actionable escape runbook and credential export guarantees to mitigate vendor lock-in.
Show detailsHide details
Supported Structured Export Formats
JSONCSVPDF
Password Hash Portability
Locked: Proprietary Algorithm / No Export

Credential hashes are guarded under proprietary algorithms and cannot be exported.

CLI Command / Rescue Endpoint
https://api.detectify.com/rest/v2/
Exit Protocol & Migration Notes

La exportación de vulnerabilidades e informes se realiza a través de la API REST o mediante webhooks configurados en el panel de administración.

Deployment & Infrastructure Requirements: DetectifyDocker
Hardware specs and Docker directives to run on local servers, dedicated VPS, or Kubernetes without telemetry leak to the cloud.
Show detailsHide details
Minimum Memory1 GB RAM (Recommended)
Compute CPU1 vCPU
Runtime / LanguageTypeScript / Go / Rust
Code LicenseOpen Source
Docker CLI Directive
docker run -d --name detectify -p 8080:8080 detectify:latest
Companion Services & Dependencies:
PostgreSQL 15+Redis 7+
Community & Repository
Show detailsHide details

Technical Reputation of Detectify

74/100 Technical Trust

Frequent Praises in Production

  • Crowdsourced hacker research integrated directly into testing rules.
  • Simultaneous coverage of REST and GraphQL APIs alongside traditional DAST.
  • Continuous automated discovery of external attack surface assets.

Reported Production Frictions

  • Higher-tier plans and advanced governance features carry significant costs.
  • Lack of fully self-hosted deployment options for air-gapped environments.
Commercial Treatment & Vendor Lock-in:Self-Service in Dashboard

Cancellation flow is autonomous via billing portal or subscription settings.

Frequently Asked Technical Questions (Detectify)

What types of scanning does Detectify support?

Detectify supports dynamic application security testing (DAST), external attack surface management (EASM), and specialized scanning for REST and GraphQL APIs using payload-based fuzzing techniques.

How is Detectify billed and what pricing models exist?

The platform operates under a SaaS subscription model with tiered options ranging from starter developer packages to custom enterprise plans based on volume and governance requirements.

Can Detectify be integrated into CI/CD pipelines?

Yes, the platform provides application programming interface access and webhooks allowing engineering teams to automate security scans within their existing development and delivery workflows.

Direct Alternatives

All tools in Detectify
Embed Verification Badge
Official Badge
Show detailsHide details
TheJudex Verified - Detectify