Detectify vs Halo Security
Halo Security pairs attack surface monitoring with manual penetration testing, while Detectify tests your web apps and APIs with payloads built with ethical hackers.
Last updated 8 October 2026
| Detectify | Halo Security | |
|---|---|---|
| How tests are built | Payload-based tests, including 1,765+ Crowdsource modules from ethical hackers | Application Scanning uses Qualys’ engine. Proprietary signatures check for subdomain takeover* |
| Attack surface monitoring | Subdomains, IPs and IP ranges, open ports and technologies, plus subdomain takeover checks every 8 hours | Subdomains, alternate TLDs, IP ranges, open ports and technologies, plus subdomain takeover checks* |
| Ports monitored | Around 8,500 ports per target | All 65,535 TCP ports and the top 1,000 UDP ports per target* |
| Web app scanning | Headless Chrome crawler with full SPA support | DAST add-on for OWASP Top 10 issues such as SQL injection* |
| Integrations | Jira (two-way), Slack, Microsoft Teams, PagerDuty, Opsgenie, ServiceNow, Splunk, webhooks, Workato, REST API | Jira, Linear, Slack, Teams (beta), Google Chat, PagerDuty, Splunk, Vanta, ServiceNow via Zapier, webhooks, API* |
| Free trial | 2 weeks | 7 days, up to 100 assets* |
Detectify helps 10,000+ users manage their attack surfaces
Which one fits your team
Detectify
Choose Detectify if
- Your biggest risk sits in internet-facing web apps, APIs and subdomains
- You want testing that goes beyond known CVEs
- You want attack surface monitoring and application testing in one platform
Halo Security
Choose Halo Security if
- You want all 65,535 TCP ports and the top 1,000 UDP ports scanned per target
- You want automated scanning and manual penetration tests from one vendor
- You need Linear or Google Chat integrations
Why teams choose Detectify
1,765+
1,765+ Crowdsource modules from ethical hackers run against the assets you add
- Crowdsource ethical hackers submit payloads for vulnerabilities they find in the wild
- 1,765+ modules run against the assets you add
- New tests ship when a vulnerability is disclosed, as with Log4Shell on the same day
- Crawls your app in a real browser, so JavaScript and single-page apps get tested
- Basic access authentication, recorded login and recorded crawling
- Technology fingerprinting picks the tests that fit your stack
- Import an OpenAPI spec or GraphQL schema and pick the operations to test
- OAuth, Basic Auth and API key authentication
- Prompt injection tests for AI and LLM endpoints
Crowdsource from submission to test
01
Ethical hacker submits a payloadCrowdsource · path traversal
GET /static/..%2f..%2f..%2fetc/passwd
02
Reviewed, then shipped as a test moduleJoins 1,765+ modules
03
Finding
trade.go-hack-yourself.netPath traversalHigh
Application Scanning recorded login
01
Login recorded onceDetectify Recorder, a Chrome extension
RECtrade.go-hack-yourself.net/logindemo@go-hack-yourself.net••••••••••Sign in
02
Crawled like a person, still logged inHeadless Chrome · clicks buttons, fills forms
03
Finding
trade.go-hack-yourself.net/accountXSSHigh
API Scanning from spec to scan
01
Import your spec, pick the operationsOpenAPI or GraphQL · auth: OAuth
# openapi.json
GET /orders/{id} ✓
POST /orders ✓
POST /assistant/chat ✓
02
Payloads sent to each operationRotated between runs
03
Finding
api.go-hack-yourself.net/assistant/chatPrompt injectionHigh
“With Surface Monitoring, we found subdomains we didn’t know we had.”
FAQs
Yes, for teams whose main risk is internet-facing web apps, APIs and subdomains. Detectify monitors your external attack surface and tests applications with payload-based tests. Halo Security combines attack surface monitoring and an application scanning add-on that uses Qualys’ engine with manual penetration testing.
How the tests are built. Detectify's tests come from its own research and from Crowdsource, a program of ethical hackers who submit payloads for real vulnerabilities. Halo Security's Application Scanning add-on uses Qualys' engine.
Yes. API Scanning tests the operations you choose in an OpenAPI v2, v3 or v3.1 spec or a GraphQL schema that you import. It supports OAuth, Basic and API key authentication.
Yes. Internal Scanning runs inside your network and connects outbound only. You deploy it with Terraform on AWS or with Helm.
Yes. Application Scanning supports Basic authentication, Recorded Login and Recorded Crawling.
Pricing depends on the products you use and how many assets you cover. Surface Monitoring is priced by the number of domains in scope, and Internal Scanning by the number of internal apps. Start a 2-week free trial, or talk to sales for a quote.
Yes. They run independently, so you can use Halo Security for manual penetration tests and Detectify for automated web app and API testing.
See Detectify on your own domains
Start a free trial, or book a demo to walk through Detectify with our team.