Skip to content
SocialAtoZ

Detectify

Verified

External attack surface management and DAST scanning powered by ethical hackers

–

Not yet rated. Be the first to review Detectify.

Detectify screenshot See all screenshots
  • Deployment Cloud Based
  • Starting price Free
  • Free trial Available
  • Best for Startups, SMEs, Agencies

What is Detectify?

Detectify is a Swedish security platform combining External Attack Surface Management (EASM) with Dynamic Application Security Testing (DAST). It automatically discovers internet-facing domains, subdomains, and cloud assets, then continuously monitors them for DNS changes, exposed services, and exploitable vulnerabilities in custom-built web applications and APIs.

A distinguishing feature is Detectify Crowdsource, a network of over 400 ethical hackers who feed real-world vulnerability research into the platform, letting new test modules go live in as little as 15 minutes. The product is aimed at security and engineering teams that need continuous visibility into their changing attack surface, with CI/CD integrations, SSO, and white-labeled reporting available on higher tiers.

Key Features of Detectify

Detectify lists 10 documented features, including Continuous External Attack Surface Management (EASM) with automated asset discovery, Dynamic Application Security Testing (DAST) for custom web applications and API security testing for REST and GraphQL endpoints. The list below covers what the product does rather than how it is marketed.

  • Continuous External Attack Surface Management (EASM) with automated asset discovery
  • Dynamic Application Security Testing (DAST) for custom web applications
  • API security testing for REST and GraphQL endpoints
  • Crowdsource vulnerability research network of 400+ ethical hackers
  • New test modules can go live within 15 minutes of new vulnerability findings
  • DNS and subdomain monitoring for attack surface changes
  • CI/CD pipeline integrations
  • SSO support via Okta, OneLogin, Ping Identity, and SAML 2.0
  • White-labeled, exportable reports
  • Multi-team support and role-based access on higher tiers

Detectify Pricing

Detectify lists 4 plans, starting free and running to €15,000.

Starter

Free

annual platform fee

Up to 5 users and 1 team, aimed at developers and hackers, with REST API scanning and email support.

Standard

€2,500

annual platform fee

From this annual platform fee for up to 10 users and 1 team, built for growing teams needing advanced workflow support.

Professional

€5,000

annual platform fee

Most popular tier, from this annual platform fee, with unlimited users across 2 separate teams for scaling operations.

Enterprise

€15,000

annual platform fee

From this annual platform fee, with unlimited users and unlimited teams, hands on onboarding and a dedicated customer success manager.

Detectify Specifications

Detectify is available on web app. It offers an API, has a free trial and has a free plan.

Deployment
  • Cloud Based
Billing cycle
Yearly
Desktop
  • Web App
Languages
  • English
Built for
  • Startups
  • SMEs
  • Agencies
  • Enterprises
Support
  • Email
  • Live Support
  • Tickets
Integrations
Slack, Jira, GitHub, GitLab, AWS, PagerDuty, Okta, OneLogin, Ping Identity, SAML 2.0 SSO, CI/CD pipelines
Public API
Yes
Free trial
Yes
Free plan
Yes
Runs in browser
Yes
Customisable
Yes
Website
detectify.com

Detectify Videos

Detectify Screenshots

Used Detectify? Write the first review.

Detectify FAQs

Yes, Detectify offers a 2-week free trial in addition to a free Starter tier with a €0 annual platform fee.

It is a network of over 400 ethical hackers who submit real-world vulnerability research, which Detectify turns into automated test modules, some live within 15 minutes of discovery.

Yes, it tests REST and GraphQL APIs using fuzzing and real-world payloads to confirm vulnerabilities.

Detectify is a cloud-based SaaS platform accessed through a web browser; there is no on-premises version.

Yes, beyond the base platform fee, pricing scales with the number of monitored domains, subdomains, environments, and IP ranges.