Probely

I like almost everything about Probe.ly but one thing that really stands out is Probely’s support. They are really hands on and proactive when it comes to any problem we experience.

Nothing really. There’ve been some minor bugs but whenever it happens customer support comes in and fixes the issue pretty quickly.

- Output is developer-friendly. Full details of the scan results, test info submitted, and recommended fixes are all in the report, making it easier for devs to ingest and respond to vulnerabilities
- Flexible GUI that makes scheduling, managing, and monitoring scans simple and easy
- API-driven. Rather than sending spreadsheets or PDFs of vulnerability reports, we can easily pull data from the latest scan

- Somewhat limited functionality, e.g., can identify vulnerabilities in a web app, but not an out of date web server. Such a scenario would require multiple tools
- Custom vulnerability scoring may not align with everybody's vulnerability scoring. The reports include the CVSS score as well as Probely's assigned criticality, so it is possible to work around this.

Easy to use, has decent amount of features.

The API support could get better. Like more advanced controls using APIs and improved documentation

We started using probely mainly for the automation potential in our CI/CD potential and ended up growing into the solution, right now I would say is our best tool we have evaluation value for our $ spent.

I would say the things I like the least are the same across all companies we at OLX have very specific needs that are sometimes dev dependent on the vendor side and as many other probely customers we would love to have a quicker feature request into production.

It's straight forward in it use, and does do what it says it should do.

Even though the api is extensive, you can only scan fixed targets, so scanning several containers after build where the address is changing from is not possible. limiting our scans to staging and prod only,