No more typing reviews! Try our Samantha, our new voice AI agent.

Pentest-Tools.com vs Software Risk Manager ASPM comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Pentest-Tools.com
Ranking in Static Application Security Testing (SAST)
25th
Average Rating
8.4
Reviews Sentiment
4.9
Number of Reviews
3
Ranking in other categories
Penetration Testing Services (8th)
Software Risk Manager ASPM
Ranking in Static Application Security Testing (SAST)
30th
Average Rating
0.0
Reviews Sentiment
7.0
Number of Reviews
1
Ranking in other categories
Software Composition Analysis (SCA) (23rd), Application Security Posture Management (ASPM) (17th)
 

Mindshare comparison

As of October 2026, in the Static Application Security Testing (SAST) category, the mindshare of Pentest-Tools.com is 0.5%, up from 0.3% compared to the previous year. The mindshare of Software Risk Manager ASPM is 1.3%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST) Mindshare Distribution
ProductMindshare (%)
Pentest-Tools.com0.5%
Software Risk Manager ASPM1.3%
Other98.2%
Static Application Security Testing (SAST)
 

Featured Reviews

SangramGupta - PeerSpot reviewer
Security Consultant at Deloitte
Platform has strengthened attack surface visibility and vulnerability validation but needs better remediation tracking
Pentest-Tools.com could improve in a couple of areas. First, the reporting flexibility could be enhanced. Second, there should be additional automation for remediation tracking since it currently lacks automation for this, requiring me to track remediations manually using the reports. Third, deeper integration with vulnerability management workflows could be beneficial, as I should have more options for integrating the tool with other security pen testing or application scanning tools. Regarding Pentest-Tools.com's AI capabilities, I believe there should be proper boundaries managed by their team in terms of governance and security, especially when the tool provides false positive vulnerabilities. These should also be detected on the governance side and resolved within the tool rather than manually, indicating an area for improvement in governance and compliance. In terms of the accuracy and reliability of Pentest-Tools.com's AI-generated output, I feel it can provide comprehensive output and reports. However, as it is AI-generated, the pentester or user should thoroughly check and validate the output before presenting it to stakeholders or the remediation team.
Saravanan_Radhakrishnan - PeerSpot reviewer
Senior Manager at Happiest Minds Technologies
Facilitates continuous assessment of applications, covering both static and dynamic security aspects
Code Dx lacks one aspect, the dynamic security part, known as DAST. It's not an on-premise solution; it's in the cloud now. There are compliance standards and data standards where the customer might need to have the data on-premises for dynamic security testing. So that is one shortfall. An area of improvement could be developing an on-premise DAST solution. The current one is a complete cloud-based solution, and that can be one of the areas of improvement.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"If you have a lean DevOps or IT team that needs robust security scanning and professional reporting for compliance or vulnerability management without spending weeks learning CLI security tools or paying exorbitant enterprise fees, Pentest-Tools.com is easily one of the best SaaS solutions available."
"Pentest-Tools.com has positively impacted my organization in two significant ways."
"Pentest-Tools.com is an entirely wholesome solution that helps with everything in one suite instead of getting two applications doing the same thing."
"The customers were looking for something around static security and dynamic security, and in all those areas, they were looking for an industry leader with a proven solution. Synopsys is a Gartner leader, so I position this particular technology for the technical pre-sales part of it."
 

Cons

"Pentest-Tools.com could improve in a couple of areas. First, the reporting flexibility could be enhanced."
"The initial setup is a bit challenging because things are not easy. It needs a lot of technology adaptability plus the customer's environment-specific use cases."
 

Pricing and Cost Advice

Information not available
"It is more of an enterprise solution for budget-conscious customers. So, it's moderately priced. It's not for everybody."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
919,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
20%
Outsourcing Company
18%
Financial Services Firm
17%
Construction Company
9%
Manufacturing Company
15%
Comms Service Provider
13%
Financial Services Firm
12%
University
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

What needs improvement with Pentest-Tools.com?
I would love to have more daily free scans since this is helping me as an individual. My major suggestion is that if more daily free scans could be provided, I would appreciate that.
What is your primary use case for Pentest-Tools.com?
I use Pentest-Tools.com on the website to scan environments that are currently on the cloud for vulnerabilities. A friend of mine developed an application and wanted me to test if there were gaps a...
What advice do you have for others considering Pentest-Tools.com?
Pentest-Tools.com is almost perfect. I would advise those who want to use it to take full advantage of it because it handles security testing, network testing, vulnerabilities for applications, and...
Ask a question
Earn 20 points
 

Also Known As

No data available
Code Dx
 

Overview

 

Sample Customers

1. Google 2. Microsoft 3. Amazon 4. Facebook 5. Apple 6. IBM 7. Oracle 8. SAP 9. Cisco 10. HP 11. Dell 12. VMware 13. Red Hat 14. SUSE 15. Ubuntu 16. CentOS 17. Fedora 18. Arch Linux 19. Gentoo 20. Slackware 21. Mageia 22. OpenSUSE 23. Manjaro 24. PopOS 25. elementary OS 26. Linux Mint 27. Ubuntu MATE 28. Zorin OS 29. Deepin
Discover why companies like: CGI said, "Synopsys and Software Risk Manager have provided the results we’re looking for".
Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Static Application Security Testing (SAST). Updated: October 2026.
919,341 professionals have used our research since 2012.