Detectify

Detectify is an application security and attack surface management company founded in 2013 in Stockholm, Sweden. It helps engineering teams find exploitable vulnerabilities across web applications and APIs before attackers do, drawing on knowledge sourced from an external ethical hacker community.

The Detectify platform continuously scans an organization’s domains and subdomains to build an attack-surface inventory, then runs application and API security tests powered by payloads contributed by ethical hackers. More than 10,000 users, including public-sector agencies and companies such as Trustly and New Relic, rely on its findings to prioritize remediation.

1. Surface Monitoring: Automatically discovers domains, subdomains, and exposed assets as they change.

2. Application Scanning: Tests web applications for OWASP Top 10 and business-critical vulnerabilities.

3. API Scanning: Extends vulnerability testing to REST and GraphQL API endpoints.

4. Crowdsourced Research: Converts findings from ethical hackers into automated test modules within days.

5. Risk Prioritization: Scores vulnerabilities by exploitability to help teams focus remediation effort.

6. Integrations: Connects to ticketing and CI/CD tools such as Jira and Slack for developer workflows.