Edgescan

Edgescan excels in simplicity and the ease of adding a new endpoint for authenticated application scanning with verified findings. It cuts down on false positives, which builds trust with technical teams and leads to better engagement. It streamlines our internal processes across multiple technical groups. Edgescan offers authenticated vulnerability scanning as a service. Licenses cannot be moved between assets. By reducing false positives, Edgescan increases trust and engagement. It simplifies workflows through easy onboarding, quick addition of endpoints, and authenticated scanning that provides verified vulnerabilities. The integration with Slack for alerts is also a plus.

All opinions here are my own and not those of my employer. The platform is feature-rich, offering options to navigate to assets with granular tags and configuration. I have no dislikes, but at this stage, I need to reach out to the CSM for tasks like changing an asset from external to internal or adding user roles, which would be nice to have direct flexibility for. Also, once an asset blocker is resolved, it doesn't appear anywhere. It would be helpful to have the block history as part of the asset itself. All views here are personal and not my employer's. It provides coverage on assets, which helps me maintain compliance.

Edgescan offers a straightforward user interface with various levels of reporting on cybersecurity risks, and their customer support is incredibly helpful. The platform performs robustly with frequent reporting and alerts, allowing us to respond quickly and proactively integrate new security measures. I haven't had any negative experiences with Edgescan. We sell a data product, and Edgescan's support in keeping access secure helps protect our customers' data, which greatly benefits us in selling our product and ensuring it meets all security regulations in the market.

The user-friendly interface makes it easy to move around the platform and access any asset. The notification mechanism for blocked assets or newly reported vulnerabilities is also handy. The variety of report styles is impressive. I genuinely can't point to any feature I dislike. When I first started with Edgescan, I struggled with the filtering system—customizing it to my needs was tricky. That's no longer an issue, but it was a significant obstacle initially. It might be helpful to have a dedicated section for Penetration Tests, separate from ongoing scanning results. Overall, it aids in managing company assets, organizing vulnerabilities, and supporting continuous security assessments.

I like that Edgescan provides a monthly scan that fits perfectly with our monthly release cycle. The portal is full of useful features and typically gives us all the information we need. It's also good to know there's a responsive support team, even though we rarely call on them. One suggestion would be to have the statistics show more recent data, like the last 3 or 5 years, instead of all-time (which is 8 years for us). I use Edgescan for security and penetration testing, keeping our expertise sharp on threats and ensuring data safety for clients and ourselves.

What I appreciate is the validated, nearly false-positive-free nature of Edgescan's vulnerability scanning. It was simple to set up and expand. However, the user interface isn't particularly user-friendly and has been tough to navigate efficiently. Key functions and settings aren't always where you'd expect, making routine tasks harder without extra help. This has led to delays in getting things done and pinpointing issues. Additionally, ongoing problems with email delivery and the recurring "Failed to construct the email" error have further hurt the experience. Because of these persistent issues, we haven't been able to use the tool effectively or get its intended value. We'd like a prompt investigation and advice on resolving these problems so we can use the platform more effectively. Edgescan helps with continuously discovering, validating, and prioritizing real vulnerabilities across the environment.

The Edgescan console is a favorite of mine because it consistently delivers new features and supplies most of the data I require, all in an easy-to-use interface. The support is amazing, with Tim Lekan and Louise Fitzgerald providing excellent customer service. Also, all the details I need about pentests, applications, and vulnerabilities are centralized, making it simple to share with teams. It integrates smoothly as well; we route vulnerability data into several VM tools from it. The setup is quite adaptable and flexible, with Tim and Louise assisting with adjustments like jump box configurations and using internal accounts for tests. I'm not sure what could be improved, but occasionally the ops team might make errors in scanning a site or inadvertently push too many RPS, though these incidents are rare and not deal-breakers. Edgescan enables us to scale our security testing for a large multinational. The console is user-friendly, and having all pentest info in one place makes distribution to teams effortless.

Edgescan offers outstanding visibility into our external attack surface and streamlines the remediation of vulnerabilities. The platform merges ongoing scanning with expert review, which substantially cuts down on false positives and lets our team concentrate on real security issues. We especially appreciate the clear risk-based prioritization, detailed fix instructions, and extensive reporting that aid both our operational security and compliance like PCI DSS. The support team is quick to respond, and the platform has fostered better collaboration among our security, infrastructure, and development groups while keeping our security posture strong. Even though Edgescan excels at finding and validating vulnerabilities, there are areas for enhancement. The user interface can occasionally be less intuitive when handling a large number of assets and findings, especially during in-depth analysis or reporting. Customizable reports and dashboards could offer more flexibility to meet different audience needs. Also, deeper integrations with more security and ITSM platforms would ease remediation workflows and cut down on manual tasks. While support is responsive, some advanced feature requests might take a while to implement. Edgescan tackles several core issues in external vulnerability management. It provides ongoing visibility into our internet-exposed assets, helping us catch security weaknesses before they're exploited. The validated findings cut down time on investigating false positives and allow our team to concentrate on actual risks needing remediation. From a business standpoint, Edgescan improves our ability to prioritize vulnerabilities based on risk, monitor remediation, and show accountability among technical teams. It also supports our compliance initiatives, including PCI DSS, by giving actionable reports and proof of ongoing vulnerability management. As a result, we've bolstered our security, improved remediation efficiency, and grown more confident in the security of our external attack surface.

I find Edgescan's uncomplicated interface highly appealing; it makes moving around the portal very straightforward. Everything is organized neatly, so we're not constantly navigating through multiple pages. The details offered are truly useful and cut down on the time we'd otherwise spend looking for things ourselves. Up to now, I've found nothing to criticize. The system operates smoothly and our experience has been problem-free. My role involves using Edgescan to inspect customer systems for vulnerabilities that might slip past manual reviews. It's proved invaluable because we lack the personnel to conduct these checks ourselves, and it provides a comprehensive picture of what requires attention, thereby saving us time and energy.

The Edgescan team is highly knowledgeable and genuinely enthusiastic about security, which is evident in both the platform and their top-tier support. Setting up the platform was straightforward, and the generated information is well-organized and comprehensive, making it much simpler to address issues because you get thorough explanations not just about the problem but also how to fix it. Integrating it into our existing engineering and security workflows was a breeze. Scheduling automated vulnerability scans is straightforward, and you can easily configure them to run frequently. I have no complaints whatsoever—Edgescan has exceeded all my expectations. As a growing company, trust and reputation are vital for us and our customers. Protecting our systems and their data is a top priority. Incorporating Edgescan into our daily operations has significantly improved our posture in these areas, and the adoption process was smooth. Our ISO27001 certification was partly due to our use of Edgescan.