No more typing reviews! Try our Samantha, our new voice AI agent.

Astra Pentest vs HackerOne comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
11th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
39
Ranking in other categories
Container Security (11th), Cloud Workload Protection Platforms (CWPP) (8th), Cloud Security Posture Management (CSPM) (8th), SaaS Security Posture Management (SSPM) (1st), Cloud-Native Application Protection Platforms (CNAPP) (6th)
Astra Pentest
Ranking in Vulnerability Management
133rd
Average Rating
0.0
Number of Reviews
0
Ranking in other categories
Static Application Security Testing (SAST) (43rd), Penetration Testing Services (42nd), Dynamic Application Security Testing (DAST) (21st)
HackerOne
Ranking in Vulnerability Management
32nd
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
10
Ranking in other categories
Application Security Tools (18th), Bug Bounty Platforms (2nd), Penetration Testing Services (2nd), Attack Surface Management (ASM) (7th), AI Observability (16th)
 

Mindshare comparison

As of June 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.0%, up from 0.9% compared to the previous year. The mindshare of Astra Pentest is 0.1%, up from 0.0% compared to the previous year. The mindshare of HackerOne is 0.8%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.0%
HackerOne0.8%
Astra Pentest0.1%
Other98.1%
Vulnerability Management
 

Featured Reviews

RO
IT Security Expert at Alior Bank S.A.
Unified risk scoring has improved our cloud visibility and simplifies remediation priorities
Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.
Use Astra Pentest?
Leave a review
NitishKumar - PeerSpot reviewer
Consultant at a manufacturing company with 10,001+ employees
Crowdsourced security has strengthened our bug discovery and improved vulnerability response
HackerOne is already doing well, although I believe implementing stricter SLAs for the time to first response and time to bounty would help prevent researchers' burnout, especially regarding duplicate submissions. I suggest systematic bug rewards because currently, if a researcher finds one bug in multiple places, they often only get paid for one. Improving the handling of systemic vulnerabilities would encourage deeper research. Additionally, improving multi-currency and crypto payout options would help make the platform more accessible globally.
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
899,125 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
20%
Financial Services Firm
13%
Construction Company
7%
Computer Software Company
7%
No data available
Manufacturing Company
13%
Comms Service Provider
12%
Financial Services Firm
10%
Computer Software Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise28
No data available
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise1
Large Enterprise7
 

Questions from the Community

What needs improvement with Qualys TotalCloud?
Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...
What is your primary use case for Qualys TotalCloud?
Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...
Ask a question
Earn 20 points
What is your experience regarding pricing and costs for HackerOne?
I'm not very sure about pricing, setup costs, and licensing, as those are managed by our management team.
What needs improvement with HackerOne?
HackerOne is already doing well, although I believe implementing stricter SLAs for the time to first response and tim...
What is your primary use case for HackerOne?
Our main use case for HackerOne is to create a bridge between the organization and a global community of ethical hack...
 

Also Known As

Qualys TotalCloud with FlexScan
No data available
HackerOne Assets, HackerOne Pentesting Services, HackerOne Security Assessments, HackerOne Vulnerability Management
 

Overview

 

Sample Customers

Information Not Available
1. Google 2. Microsoft 3. Amazon 4. Facebook 5. Apple 6. IBM 7. Cisco 8. Intel 9. Oracle 10. Adobe 11. Netflix 12. Twitter 13. LinkedIn 14. Salesforce 15. Uber 16. Airbnb 17. Spotify 18. Dropbox 19. PayPal 20. Tesla 21. Samsung 22. Sony 23. HP 24. Dell 25. Siemens 26. Volkswagen 27. BMW 28. General Electric 29. Philips 30. Accenture 31. Deloitte 32. PwC
Anthropic, Crypto.com, General Motors, GitHub, Goldman Sachs, Uber, and the U.S. Department of Defense
Find out what your peers are saying about Wiz, Tenable, Qualys and others in Vulnerability Management. Updated: May 2026.
899,125 professionals have used our research since 2012.