Skip to content
AppClap
Detectify is unclaimed —

Detectify

Application security built and trusted by hackers·detectify.com

Browse Monitoring

Visit

Free plan See pricing ↓

Detectify is an external attack surface management (EASM) platform that helps security teams continuously discover, monitor, and test their internet-facing domains, IPs, applications, and APIs. It combines payload-based automated scanning with intelligence from a community of ethical hackers (Crowdsource) and AI-powered fuzzing to find exploitable vulnerabilities, including many not covered by public CVE databases. The platform also offers internal scanning, PCI ASV scanning, and tooling (including an MCP server) to give AI coding agents deterministic access to security scan data.

What it's for

Continuous monitoring of external attack surfaceDiscovering and mapping domains, subdomains, IPs, technologies, ports, and protocolsAPI security testing (REST and GraphQL)Authenticated deep application (DAST) testingDetecting subdomain takeover vulnerabilitiesPCI DSS compliance scanningInternal network and CI/CD integrated scanningValidating AI agent-generated code and deployments against verified security findingsSharing white-labeled vulnerability reports with stakeholders

Features 17

  • 600+ subdomain takeover discovery methods
  • Agentic tooling for deterministic security validation by AI agents
  • Alfred AI autonomous vulnerability researcher
  • Apex domain discovery
  • API Scanning (REST & GraphQL) with payload-based testing
  • Application Scanning: deep authenticated DAST testing
  • Crowdsource ethical hacker community contributing vulnerability research
  • Custom security tests (Enterprise)
  • Dynamic AI Fuzzing engine generating adaptive payloads
  • Internal Scanning for internal systems and CI/CD integration
  • IP range scanning
  • MCP Server giving AI agents deterministic access to scan data
  • PCI ASV Scanning for PCI DSS compliance
  • Quarterly business reviews and priority early access to new features (Enterprise)
  • Single sign-on (SSO) via Okta, Ping Identity, OneLogin, SAML 2.0
  • Surface Monitoring: continuous discovery and mapping of domains, subdomains, IPs, technologies, ports, and protocols
  • White-labeled scan reports

At a glance

free tierfree trialAPI
TypeWeb app
DeploymentCloud
PlatformsWeb
Forsecurity teams, engineering teams, AppSec engineers, developers, enterprises, non-profit organizations
CompanyDetectify AB

Integrations

Claude CodeChatGPTCursorCodexGitHub CopilotClaude DesktopOneLoginSAML 2.0Ping IdentityOktaAWS Marketplace

Complianceself-reported

ISO 27001PCI DSSGDPR

Resources

Pricing

Plans are priced as annual platform fees stated in EUR (Starter from €0, Standard from €2,500, Professional from €5,000, Enterprise from €15,000). Additional costs apply for extra assets, domains, environments, and IP ranges. Non-profits receive a 30% discount. Also available for purchase via AWS Marketplace with Amazon billing.

StarterFree

Listed as 'from €0 annual platform fee'

Up to 5 users, 1 team

StandardQuote

Listed as 'from €2,500 annual platform fee'

Up to 10 users, 1 team

ProfessionalQuote

Listed as 'from €5,000 annual platform fee'; marked 'Most popular'

Unlimited users across 2 separate teams

EnterpriseQuote

Listed as 'from €15,000 annual platform fee'

Unlimited users & unlimited teams

30% discount offered to non-profit organizations

Similar apps

Last checked 1 month ago·