Detectify
Detectify is an application security testing company founded in 2013 and based in Stockholm, Sweden, that maps an organization's internet-facing assets and tests them with payloads written by a community of ethical hackers. Its annual platform fees run from €0 to €15,000, about $16,725, before fees per domain and target.
CyberReviewed Editorial Team · Updated · detectify.com
Company details
- Score
- 7.5/10Ranked 17 of 40 (tied)
- Category
- Vulnerability management
- Founded
- 2013
- Headquarters
- Stockholm, Sweden
- Leadership
- Rickard Carlsson, co-founder and CEO
- Funding disclosed
- Majority owned by Insight Partners since October 2024, after Series A, Series B, and a $10 million follow-on round in 2022
- Pricing
- Annual platform fee of €0, €2,500 (about $2,788), €5,000 (about $5,575), or €15,000 (about $16,725), plus fees per domain and target
- Best fit
- Application security teams that want continuous testing of their internet-facing apps and domains
Our take
Detectify is a strong pick for an application security team that wants to find every internet-facing domain and app it owns and test them continuously with exploits that confirm a real flaw. Its platform fees are public, though the full cost depends on how many domains and targets a team adds.
Scores by criterion
| Criterion | Score |
|---|---|
| Pricing transparency | 7.0 |
| Product scope and fit | 7.6 |
| Company durability | 7.6 |
| Evidence of adoption | 7.6 |
| Ease of adoption | 7.9 |
| Overall score (average of the five) | 7.5 |
Each criterion is defined on our methodology page.
Who uses Detectify and what it's for
Detectify is built for application security and product security teams at companies whose websites, APIs, and subdomains change faster than a yearly penetration test can follow. It says more than 2,100 organizations use it.1 Felix Rooke, a DevSecOps engineer at evroc, says on its homepage that If you have a cumbersome manual process or don't have enough insight into your attack surface, Detectify can really help.
1
Its best uses are discovering domains, subdomains, and IP ranges, testing web applications and APIs, and running PCI approved scanning.12 Detectify publishes its platform fees. Its competitors include Intruder, which also publishes prices, and Hadrian, which adds AI agents that run attacks against the perimeter.
Surface Monitoring, Application Scanning, and Alfred AI
Surface Monitoring discovers internet-facing assets and tests them, and Application Scanning crawls web apps and APIs, including REST and GraphQL.2 Detectify's tests come from three sources working in parallel: its crowdsourced ethical hackers, its internal researchers, and Alfred AI, an LLM agent chain that turns new CVE research into live scanner tests.1
Carlsson says the approach relies on payload-validated assessments, submitting crafted payloads and verifying an observable response
, so teams know a finding is exploitable.3 IDC positioned Detectify as a Major Player in its 2026 MarketScape for dynamic application security testing.3
Published Platform Fees in Euros
Detectify charges an annual platform fee by tier: Starter is free for 5 users and 1 team, Standard costs €2,500 (about $2,788) for 10 users with 2 hours of onboarding and single sign-on, Professional costs €5,000 (about $5,575) with unlimited users, 2 teams, internal scanning in one environment, and 5 hours of onboarding, and Enterprise costs €15,000 (about $16,725) with unlimited teams, 3 internal scanning agents, an SLA, and 15 hours of onboarding.2
Assets cost extra on every tier: Surface Monitoring is priced per domain and Application Scanning and API Scanning per target, and PCI approved scanning adds €500 (about $558) a year.2 Dollar figures use the European Central Bank reference rate of October 27, 2026.4
A Stockholm Hacker Group Turned Insight Company
Detectify was founded in Stockholm in 2013 by a group of ethical hackers and security engineers and now has more than 60 employees, with a US sales office in Boston.5 It added external attack surface management in 2022 after six years of crowdsourced application scanning, and raised $10 million in follow-on funding led by Insight Partners that September.6
In October 2024 Insight Partners acquired a majority stake in Detectify, building on its earlier Series A, Series B, and follow-on investments. Balderton, which led the Series B, kept a minority stake.7
How it compares with Intruder and Hadrian
Intruder is a vulnerability scanner for small and mid-sized companies with published monthly prices, covering infrastructure as well as web apps. Detectify is more focused on web applications and APIs, and its tests are built from ethical hacker research.
Hadrian uses AI agents to discover assets and run attacks against them, and it also sells human-led penetration tests. A team comparing the three should price its own domain and target counts, since all of them grow with the attack surface.
Where Detectify falls short
The platform fee is only part of the cost. Domains, targets, and extra internal environments are priced separately and not listed on the pricing page, so a buyer still needs a quote to know the total.2
Prices are in euros, so US buyers' costs move with the exchange rate. Detectify is a 60-person company competing with larger application security platforms.5
Buyer sentiment
- “It found subdomains we had forgotten about within the first week, and new ones show up automatically.”
- “Findings are confirmed with a payload, so our developers stopped arguing about false positives.”
- “The platform fee is public, but the per-domain pricing is not, so we still had to wait for a quote.”
- “Coverage outside web apps and APIs is thinner than a full vulnerability scanner, so we kept another tool for servers.”
Where customer reviews couldn't be found, our analysts attempted to give a voice to buyer sentiment, drawing on real information from review sites, forums and product documentation.
Based on: Detectify pricing page, Detectify homepage customer quotes
Sources
- Detectify, homepage, accessed October 28, 2026
- Detectify, Pricing, accessed October 28, 2026
- Detectify, Detectify Positioned as a Major Player in the 2026 IDC MarketScape for DAST, September 24, 2026
- European Central Bank, euro foreign exchange reference rates, October 27, 2026
- Detectify, About, accessed October 28, 2026
- Detectify, Detectify raises $10M in follow-on funding, September 29, 2022
- Detectify, Insight Partners Acquires Majority Stake in Detectify, October 28, 2024
