Astra Pentest

Astra's penetration testing process was smooth and professional. We provided our targets, and the team delivered clear, well-structured reports with practical steps to reproduce each vulnerability. That made it easy for us to understand the root cause and fix them quickly. Communication was responsive throughout, and we were able to resolve all findings and achieve an A+ rating. A couple of areas could be improved. It would be helpful if the final certificate came with a summary report describing what was tested and confirming which areas have been verified after remediation. Also, after all findings were fixed and the certificate was issued, the vulnerabilities still appeared as 'Under Review' in the dashboard, which was confusing. Updating the status to reflect the final result would make the process clearer. Astra Pentest gave us confidence that our service is secure for both our team and our users. The assessment also provides proof of our security posture.

What I liked best about Astra Pentest was the dashboard and interface—it was easy to follow, and findings were organized in a way that made triage simple for our team. Beyond the product, their team was very responsive throughout the process and helped us secure our infrastructure, not just fix individual tickets. The clear reporting and quick collaboration made remediation faster and more organized. At times, we had extra back-and-forth to agree on whether a retest was targeting the originally reported endpoint versus a new surface. So, we'd appreciate more precise guidance on when an observation should be considered a reopened finding vs. a new one. Our main challenge is proving to potential customers that our platform is secure. Astra Pentest helps by giving us independent, structured evidence we can share during security reviews and procurement. That external validation increases trust, shortens security due diligence, and helps us close deals faster. Internally, it also gives us peace of mind that the app we're building is indeed secure.

Astra Pentest's standout feature is the team's responsiveness and their willingness to adapt to our specific needs throughout the engagement. From the initial scoping to the final report, the pentesters were professional, highly knowledgeable, and proactive in communicating at every step. The dashboard is intuitive and gives real-time visibility into test progress, findings, and remediation status, making it easy for both security and development teams to stay aligned. The mix of automated scanning and manual pentesting ensures vulnerabilities are validated properly without creating noise. The critical issues they found would have been much costlier to fix after a breach, so the value clearly outweighed the cost. It's been one of the best security investments we've made, and preventing just one serious incident more than justifies the price. The verifiable pentest certificate is a nice bonus, adding credibility when we share our security posture with clients and stakeholders. Overall, the process was smooth, thorough, and collaborative, and we got more than we expected for the price. I don't see any downside. Everything went smoothly. We needed credible, structured security validation for our application to build internal confidence and meet compliance requirements. Astra Pentest met that by delivering a thorough assessment that found real, actionable vulnerabilities, not just a generic list of low-value findings. One area where they truly stood out was their deep cloud target integration. Instead of treating cloud security as an afterthought, Astra's team did a comprehensive review of our cloud infrastructure, covering misconfigurations, exposed services, IAM policy gaps, and overall attack-surface visibility. Since the testing was closely tied to our actual cloud setup, the findings were contextual and specific to our deployment, not just a generic checklist. That gave our engineering team precise remediation guidance linked to our configuration, saving time compared to interpreting broad recommendations. Their team was also flexible and responsive to our timelines and custom requests, which helped the engagement fit naturally into our development cycle. What further boosted our confidence is that Astra is CERT-In empanelled, so their reports carry strong regulatory acceptance and authenticity—valuable when presenting to auditors, enterprise clients, and compliance bodies. It doesn't feel like just a vendor-issued certificate; the government recognition adds trust that's hard to find elsewhere. The reports were clear and detailed, and the expert support helped our developers prioritize and fix issues quickly. As a result, we now have a stronger security posture across both application and infrastructure, plus a verifiable pentest certificate we can share with confidence.

The most useful part of using Astra Pen Test was that they actually found real vulnerabilities in our product through their manual tests at a reasonable price. Also, having a dedicated rep to chat with on Slack for questions or guidance on using the platform was especially helpful. Even though the platform is fairly easy to use, some parts were confusing, and I wished there was more onboarding to understand how to run a manual pentest and the whole process from start to finish. We're working on getting HIPAA and SOC2 compliance, and having a pentest helps us meet those requirements.

Astra Pentest has an intuitive and easy-to-use interface, smooth integrations, reliable performance, and good value for money. The support team is very responsive and helpful, making setup and daily use easy. The main areas for improvement are the Jira integration and scan management. The Jira integration shows all Jira projects in the dropdown, making it hard to pick the right one quickly. We also had an issue where cancelling a stuck scan removed access to previous scan results and Jira-linked findings, but Astra's support restored them. Other than that, our experience has been very positive. Before Astra, managing pentesting and vulnerability fixes across our domains took more manual work and coordination. Astra offers both automated and manual pentesting in one platform, helping us spot vulnerabilities faster and track fixes better. The Jira integration lets us assign and monitor findings in our existing workflows, improving visibility and accountability. As a result, we've streamlined our security testing, cut down time spent managing findings, and strengthened our overall security.

What I like most about Astra Pentest is the mix of thorough security testing and an easy-to-use platform. The reports are clear, actionable, and sorted by risk, which makes fixing issues faster. The team is responsive, knowledgeable, and happy to explain things when needed. I also like the constant visibility into vulnerabilities and the organized way to track and verify fixes during the engagement. The platform is easy to use overall, but the initial onboarding and product tour could be better. A more guided walkthrough of key features, workflows, and best practices would help new users get up to speed faster and use the platform's features better. Interactive tutorials or role-based onboarding paths could also reduce the learning curve. Astra Pentest helps us find and fix security vulnerabilities before they can be exploited, lowering our overall risk. The platform gives clear visibility into findings, simplifies the fix process, and helps us verify fixes efficiently. It also supports our compliance and customer assurance needs with structured reports and ongoing assessments. As a result, we can improve our security posture while letting our engineering team focus on building features with more confidence.

As the founder of Skilwi.ai in the bootstrap stage, working in HR tech, our main goal was to make sure our software had no vulnerabilities and to build trust. We built our product with DPDP in mind from the start, not as an afterthought, so security and compliance were top priorities for our users. Astra understood what we needed and helped us fix our issues. They are quick and really work for customer satisfaction. Thanks also to our POC—they did something I didn't expect. There are many SaaS products in HR tech, and as India's first workforce intelligence OS, Skilwi has to uphold that reputation with strong security and trust. Astra Pentest became a key step for us, helping us establish our place in the security world.

The best part about Astra Pentest was the onboarding and support. The team was responsive, helpful, and made everything simple. Setting up was fast and easy, and the platform gave us strong control over the entire testing process. The central dashboard and visibility into findings helped us track progress, work with stakeholders, and manage fixes more effectively. Overall, it was a smooth experience and gave us confidence in our security testing. The only issue I had was with the multi-tenant setup. Since many SaaS platforms offer white-labeling and custom domains, having more guidance and documentation on setting up multi-tenant environments would make onboarding even easier. Astra Pentest helps us find and fix security vulnerabilities in our SaaS platform ahead of time. This is especially important for our multi-tenant setup and custom domains, as it gives us confidence, helps meet customer security needs, and makes vulnerability management and compliance easier.

I truly value their support and how quickly they respond at any hour. Astra Pentest clearly lists all the problems, how to repeat them, and how to fix them, which is super useful. Their technical assistance is also a big plus, especially when figuring out why a fix matters, and if the solution isn’t obvious, they’re there to help. Getting started didn’t take much work from our side, and after the pentest was done, we didn’t have to put in much effort since most issues were taken care of. For the next year, they could lower the price and offer help with SOC, ISO27001, and other compliance needs without charging extra, at least for spotting gaps. With Astra Pentest, we find and fix security issues effectively. It gives detailed descriptions, reproduction steps, and fixes. Their support is quick and explains any doubts about the importance of an issue or how to fix it when needed.

Astra Security proved to be a real lifesaver. With our launch approaching rapidly, we urgently needed a penetration test done in a very short timeframe. We reached out to multiple firms, but it was hard to find one that could fit our schedule and deliver on time. Astra Security’s team jumped in and made everything go smoothly. They pinpointed the weaknesses in our app fast, gave clear instructions, and helped us throughout the patching phase. After we fixed the issues, they quickly ran the rescan and provided the final Pentest Certificate. What really impressed us was their outstanding support, quick replies, and flexibility to work around our tight release date. The whole crew was professional, supportive, and truly dedicated to helping us finish. I highly recommend them to anyone needing a dependable and quick pentesting partner. The only slight drawback is that the process feels time-sensitive when you’re up against a deadline, but their responsiveness helped us handle it well. All in all, it was a great experience. Astra Pentest solved a major challenge for us: getting a thorough security review completed fast without holding back our product launch. We had a very tight go-live date and had to find and fix security issues before going to production. Astra’s team helped us spot problems quickly, guided us through patching, and did the final scan without delay. This gave us confidence that our product was safe and let us proceed with the launch without any unnecessary hold-ups.