Overview
Note: This is a contract listing for use with a Private Offer only. This listing is not meant to be transacted outside of an AWS Private Offer. To inquire about Private Offers, please contact us at apn-sales@brightsec.com
Bright's dynamic application security testing (DAST) solution, based on an extensive library of over 8,000 attack payloads, is the only DAST solution built from the ground up to cater to both developers and AppSec professionals. Unlike other DAST tools that are based on the ZAP (formerly OWASP) open-source scan engine, Bright fully developed and enhances its scan engine providing Enterprises with a single point of ownership and ensuring full vendor supply-chain accountability.
Bright empowers developers with the unique capability to initiate DAST scans right from their Integrated Development Environment (IDE). Moreover, Bright's versatile design allows for automation at any stage within the SDLC pipeline (Jenkins, GitHub Actions, Gitlab, Azure DevOps). Through Bright, organizations can seamlessly shift application testing earlier into the SDLC, identifying vulnerabilities well before they reach production.
Highlights
- With Bright's Enterprise grade DAST, organizations of all sizes can truly shift application testing left. Developers can use Bright's unique plugin for popular integrated development environments (IDE) directly, or as an integrated component of their Unit Testing processes and in their CI/CD pipelines. With Bright, developers can easily see verified vulnerabilities, such as code subject to SQL injection attacks or cross-site scripting, and the detailed mitigation steps.
- Bright stands out by offering API testing capabilities early in the Software Development Life Cycle (SDLC), thus providing a proactive approach to security. Its contemporary solution supports REST, SOAP, and GraphQL APIs, ensuring a comprehensive coverage for API testing. Bright excels in detecting an array of API vulnerabilities, including but not limited to injection threats and absence of rate limiting, among others featured on the OWASP API Security Top 10 list.
- Bright is reshaping the landscape of Dynamic Application Security Testing (DAST) by significantly reducing false positives and providing documented proof of vulnerabilities found (for example: screen captures). Bright's solution, crafted specifically for developers, enhances not only the trust in the system but also bolsters developer productivity. By alleviating 'alert fatigue' and the resultant complacency, Bright fosters a more engaged and efficient development environment.
Details
Features and programs
Security credentials achieved
(2)
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
|---|---|---|
Enterprise | Maximum 3 Concurrent Scans | $105,000.00 |
Vendor refund policy
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
If you have any questions, please contact your assigned Customer Success Manager or Engineer. For support-related issues, please report them or open tickets at https://support.brightsec.com or email: support@brightsec.com or use in-app live messaging in Bright Platform. support@brightsec.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Customer reviews
Enhancing Web App Security
2. Reduction of FP
3. Vulnerability detection.
Senior Product Security Engineer
Amazing Enterprise support with most options provided for running Authenticated Scans
Options for Authenticated Scan
Coverage
Excellent product
This company provides DAST scanning solution no other company can in a direct focused way
Flexibility in reports generation
Constant meaningful improvements in Ease of Use in last year, for example Incremental app that analyzes entrypoints and triggers scans without having to set up the parameters relevant to each.
Customer Support is very helpful even when I am not from the security field. Support also are crucial for Ease of implementation, and follow up on a weekly basis on progress.
Could use better integration with API scanning, like entrypoint discovery with target's swagger page
Need to improve flexibility in entrypoint management for a given project (mass edit, mass delete etc)
I would also suggest diversifying the licensing options:
I need to run multiple scans in short amount of time once every 2 months to test all products. Currently the license is for one engine, which means I can use it 24/7 but am limited to one running scan. Having an option for several engines that are time limited with frequency required would be useful, even a pay-as-you-go format would work well for these use cases.