No more typing reviews! Try our Samantha, our new voice AI agent.

Amazon Inspector vs Scytale comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Amazon Inspector
Ranking in IT Vendor Risk Management
6th
Average Rating
8.2
Reviews Sentiment
6.3
Number of Reviews
9
Ranking in other categories
Vulnerability Management (26th)
Scytale
Ranking in IT Vendor Risk Management
20th
Average Rating
5.0
Reviews Sentiment
4.5
Number of Reviews
2
Ranking in other categories
GRC (24th), AI Legal & Compliance (11th)
 

Mindshare comparison

As of November 2026, in the IT Vendor Risk Management category, the mindshare of Amazon Inspector is 1.6%, up from 1.0% compared to the previous year. The mindshare of Scytale is 1.6%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IT Vendor Risk Management Mindshare Distribution
ProductMindshare (%)
Amazon Inspector1.6%
Scytale1.6%
Other96.8%
IT Vendor Risk Management
 

Featured Reviews

John D'Arcy - PeerSpot reviewer
Co-Founder, Professional AWS Cloud Architect at a tech services company with 1-10 employees
Automated vulnerability assessments continuously enhance security
The most valuable features probably are the ability to do automated vulnerability assessments, which it does with Amazon Inspector version two. It operates continuously, so as soon as resources are created, it scans them for vulnerabilities. This allows me to pinpoint potential security vulnerabilities and provide actionable recommendations relatively quickly. Larger enterprises usually use Inspector to gather all the vulnerabilities, the CVEs, across all accounts in an AWS organization. The enterprises I work for typically have many accounts in their organization, such as thousands of accounts where I am at the moment. It is a way to gather the vulnerabilities that are present on EC2 instances, container images, and Lambda functions.
reviewer2814822 - PeerSpot reviewer
CEO at a tech vendor with 11-50 employees
Sudden access suspension has disrupted compliance work and raises serious trust concerns
Scytale unilaterally suspended access because in their opinion, I don't know why they did that. I'm assuming they think that we're competitive, which we're not. They sold us the system and sent a contract to us in full knowledge of what we do as a business. Compliance is a very broad word; we provide compliance into nonprofits, housing associations, markets that these guys do not serve. Somebody inside Scytale likely thought, "Oh my God, these guys must be competitive, so let's just cut them off." I'm assuming that's what happened, but there was no explanation, nothing. Scytale did not help me streamline my compliance processes. It didn't really identify gaps. There was no gap analysis in there that we could see. I didn't really get that far to use the effectiveness of Scytale's real-time insights in identifying potential compliance issues. All my experiences with Scytale have been negative. We haven't used the automated evidence collection of Scytale. Scytale has not helped me allocate resources more efficiently for compliance; it's been the opposite experience. We have put six months of effort into looking at the controls on 27001, talking about auditors, getting audit-ready, and so forth. But we've invested significant time, which has now been a complete waste of time. Scytale is not only unreliable, considering they can suspend access without any notice or formal reason, but this lack of stability results in serious concerns about their dependability as a partner. If they can do that without explanation, my fear is that even if they switch it on again, who's to know in three months' time that the same thing couldn't happen again?

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The scalability of the solution itself is unparalleled."
"Amazon Inspector is highly stable, rated ten out of ten, and this stability impacts business security and administration positively."
"The most valuable feature of Amazon Inspector is the categorization of findings, which filters vulnerabilities by instance, container image, container repository, and Lambda function."
"The integration of Amazon Inspector with other AWS services has enhanced our security. Security Hub is a major asset because it allows us to centralize data from various AWS services. We can integrate third-party tools as well. It is just a single-click option."
"The findings dashboards are neat and easy to understand, offering clear demarcations for different types of findings and detailed insights into specific vulnerabilities and their associated instances. It is not a place where everything is dumped together. It offers an easy-to-understand layout."
"I recommend Amazon Inspector because it allows the automation of processes and requires less manual monitoring."
"The vulnerability discovery is valuable, and they also rank those vulnerabilities for you. So, you could rapidly attack some of the higher, severe vulnerabilities as they pop up, if they do pop up."
"It is scanning the whole repository for any sort of vulnerabilities, so it allows us to be more confident in our DevSecOps and not put a lot of folks or attention to it."
"The processes I participated in during the setup of Scytale were straightforward; it was acceptable and fine."
"Scytale has positively impacted my organization by giving us the ability to really educate our employees and make them aware, providing them more situational awareness when it comes to cybersecurity."
 

Cons

"One major area for improvement is remediation. My team works on remediating findings over time, likely using available patches. However, easier integration with Amazon's patching services would be very helpful."
"There isn't too much to improve right now. Scanning on demand or as a part of the pipeline versus a post pipeline solution would be good, but it is not a deal breaker by any means."
"The most challenging aspect I faced with Amazon Inspector during integration was automating the remediation process."
"There are challenges associated with the interdependencies in AWS services, like requiring an Active Directory for other services, resulting in additional charges."
"There is room for improvement in the scanning capabilities. I'd like to see broader coverage in terms of the vulnerabilities detected."
"The other point is that the reporting features of Inspector need improvement. For example, I am in an organization with millions of CVEs, and getting an overview of all this is challenging."
"It has a limited scope. So, AWS Inspector primarily focuses on the security of the EC2 instance. So, if your architecture includes other AWS services, then you may need to use additional tools for your comprehensive security assessment. So that is one con. Another is, like, we have a dependency on agents."
"It has automated vulnerability assessment, yet I seek more flexibility in defining custom vulnerability checks tailored to my needs, which is more difficult."
"Scytale is not reliable at all; not stable. You would be unwise to put a mission-critical function like ISO 27001 on Scytale."
"Scytale can be improved by making the interface a bit more consistent in most areas of the platform, as sometimes it can be confusing, and some information can be inaccessible or cut off."
 

Pricing and Cost Advice

"The lowest cost would be around $10 for a few small accounts, however, for thousands of accounts, it could be around $5000 to $6000 dollars per month."
"The pricing is very transparent and clear."
"It is scaled as you go. There are probably a certain number of scans per month, and there are tiers. If you're under a certain tier, it is free. The second level is pennies, and then all the way up to like a million. So, it has a tiered pricing program. They're pretty good with your initial scanning, and there is room to scale based on being affordable, but it is fairly cheap. There are no additional costs. They pretty much think about it as a pay-per-scan type model."
"It's priced according to market standards for its services."
Information not available
report
Use our free recommendation engine to learn which IT Vendor Risk Management solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Comms Service Provider
8%
Computer Software Company
8%
Outsourcing Company
6%
Outsourcing Company
26%
Construction Company
22%
Healthcare Company
8%
Wholesaler/Distributor
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise6
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Amazon Inspector?
I am not honestly sure about the pricing side of Amazon Inspector, but that is taken care of by a separate team. I believe it's cheaper than the other third-party solutions.
What needs improvement with Amazon Inspector?
They might launch support for third-party environments in the next version regarding the best features in Amazon Inspector from my perspective. The false positive rate of Amazon Inspector is a litt...
What is your primary use case for Amazon Inspector?
I mostly use Amazon Inspector for vulnerability scanning on AWS native applications. For hybrid applications, we have different security scanners.
What needs improvement with Scytale?
Scytale unilaterally suspended access because in their opinion, I don't know why they did that. I'm assuming they think that we're competitive, which we're not. They sold us the sys...
What is your primary use case for Scytale?
My usual use case for Scytale is for ISO 27001 compliance.
What advice do you have for others considering Scytale?
We're going to sue Scytale, and we're going to sue Amazon as well because they're technically the people we're paying. My feedback on Scytale is that it's terrible. Currently, i...
 

Overview

 

Sample Customers

betterment, caplinked, flatiron, university of nutri dame
Deel, Guesty, Berlitz, AXS Guard, vSure, KOR, Trial X, Tune Insight, Agora, Leen, Upsolver. For a full list of customers and testimonials, please visit: https://scytale.ai/customers/
Find out what your peers are saying about SecurityScorecard, BitSight, MetricStream and others in IT Vendor Risk Management. Updated: October 2026.
921,523 professionals have used our research since 2012.