Intruder

Its interface is clean and detailed. Easy to use and packed with useful information to help address issues when they arise. I truly have no downsides to the product. The one I had was resolved. Previously, the dashboard layout with the hygiene score wasn't included in the reports. Now it is, so I have nothing negative to say. It resolved the cost of manual penetration testing and is a much better value.

I value Intruder's user-friendly interface, which allows for effortless navigation. The automated scanning is invaluable, as it triggers scans whenever a new issue appears, saving me from manual initiation. This automation helps quickly identify new vulnerabilities and understand their context. I love the ability to track issues within the interface until they're resolved, which simplifies my workflow significantly. Furthermore, Intruder's proactive approach to spotting potential security weaknesses means I don't need to assign someone solely for continuous monitoring, which is a big advantage. The initial setup was also simple, requiring only the creation of dedicated user accounts for the application and the Intruder bot to log in for deep scanning. Overall, Intruder not only maintains seamless usability but also integrates well with our development tools like Azure DevOps, making it an extremely valuable resource for our security management. Nothing comes to mind. I use Intruder to detect security vulnerabilities in our applications and networks, providing solutions to fix them. Its automatic scanning and easy interface save time by eliminating the need for constant monitoring.

It fulfills our requirements with minimal interaction or upkeep needed. We've had no problems; it just works. The Help Center is tucked away under my account details and should be more visible on the screen—it took me a while to find it. I'd also appreciate more detailed information on ciphers, including guidance on when to use them in various scenarios. Additionally, when the recommended fix involves a software upgrade, legacy constraints sometimes prevent us from upgrading; it would be helpful to have alternative protection options or a clear resource for that information. It enhances security for our websites and provides penetration testing documentation to our clients and vendors.

It runs quietly in the background monitoring our servers and alerts us when action is needed. Navigating the UI to find past scan reports can be a bit tricky at times. It gives our client peace of mind by offering comprehensive scan reports.

I find Intruder to be an excellent tool for reducing stress and sharpening our attention. It gives us confidence that our systems are up-to-date against the latest threats. I like that Intruder keeps us informed without demanding much effort from us. It's also the most user-friendly and intuitive tool compared to others I've tested. The initial setup was very simple, and we were able to configure all our scans within half a day. There's nothing I dislike about Intruder. I use it to scan our network for vulnerabilities. It ensures our systems are patched against the latest threats, reducing stress and increasing focus. It's intuitive, easy to use, and keeps us updated with minimal effort.

It's well-structured and makes it straightforward to spot and fix vulnerabilities in a cloud setup. I haven't encountered any unhelpful parts. It provides visibility into cloud vulnerabilities.

The user-friendly dashboard, consistent external attack surface monitoring, and helpful remediation advice make it a highly effective tool. Moreover, the ease of getting started and the minimal ongoing maintenance greatly boost its overall value. There are no dislikes regarding the Intruder platform for vulnerability management. Intruder has simplified our vulnerability management by offering continuous visibility into weaknesses across our environment, along with timely alerts and helpful insights. It has become a valuable asset to our security posture, and the team has been responsive and professional whenever we needed support.

What we appreciate most about Intruder is the clarity and prioritization of its findings. Instead of bombarding us with low-value noise, it highlights vulnerabilities that actually matter and explains their significance. The continuous scanning model is a major benefit, as it detects new issues as our environment evolves, rather than relying on occasional one-time assessments. Each finding comes with thorough context, including exploitability and practical remediation steps, making it much simpler to act on. Intruder also provides excellent visibility into externally exposed assets, which are frequently the highest-risk areas. The dashboard is clean and intuitive, enabling us to communicate risk effectively to both technical and non-technical audiences, and it seamlessly fits into our current workflows without extensive setup. Overall, it offers ongoing assurance that we're actively mitigating real-world risk rather than just performing scans for compliance. At this point, we haven't found any significant drawbacks. The platform has been easy to configure, the findings are clear and actionable, and it has integrated well into our existing processes. If anything, future feedback would more likely involve additional features or improvements rather than fundamental flaws, but so far our experience has been entirely positive. Intruder addresses the issue of infrequent, point-in-time vulnerability testing. Previously, scanning was largely an annual activity done by third-party vendors, meaning vulnerabilities could persist for months before detection. By using Intruder for weekly scans, we now have continuous visibility into our security posture and can identify and address issues much earlier. This greatly reduces risk, speeds up remediation, and gives us stronger confidence that new or emerging problems aren't overlooked between formal assessments.

I'm particularly fond of Intruder's real-time vulnerability scanning, which informs us almost instantly whenever a new vulnerability is published and pinpoints our exposure. Previously, our assessments were done quarterly, leaving up to three months between a disclosure and the next scan to check if we were affected. With Intruder, we now get near-instant updates. The environment scanning and discovery features are excellent too, immediately notifying us if anything new appears in our infrastructure, often called shadow IT. Intruder has become our primary vulnerability assessment tool, outshining both Nessus open source and Tenable, as it's equally effective but substantially better. The setup was very straightforward, almost a perfect 9.85 out of 10. However, the Azure integration is still somewhat underdeveloped. I rely on Intruder for real-time vulnerability scanning, addressing delayed assessments and ensuring immediate awareness. It provides prompt environment scanning and discovery, alerting us to any new changes or vulnerabilities.

The service is dependable. They provide a range of packages that suit various business requirements. Both customer support and the overall service are satisfactory. Additionally, they're rolling out a new platform in the UK that aligns with all applicable laws and regulations. However, they haven't obtained Cyber Essentials Plus certification, which they should work on. Since I'm involved in vulnerability assessment in the UK, compliance with GDPR and the Computer Misuse Act is crucial for any company operating there, and having that compliance gives me confidence given my daily interactions with these issues.