Cobalt Reviews

Instead of waiting for a final report, you see vulnerabilities in the dashboard the moment the testers find them. You can chat directly with the pentesters via the platform or Slack to ask questions while they are still active.

The experience can be a "luck of the draw." While all are vetted, sometimes one test was handled by a world-class expert, while the next felt like a "junior" tester who relied too much on automated tools and missed complex logic flaws.

Solves our infosec and compliance requirements for external and internal penetration tests.

Cobalt provides practical, real‑world pentesting with actionable findings that are easy for engineers to understand and fix. The ability to interact with testers and quickly validate remediations makes security feel collaborative rather than audit‑driven. It fits well into modern development workflows without adding unnecessary friction.

Pricing and scoping can feel less flexible for smaller or narrowly focused tests, and tester availability can vary depending on timing and skill set. Some findings can still lean toward generic issues, requiring follow‑up to confirm real business impact. Deeper guidance on prioritization across multiple assessments would be valuable.

Cobalt solves the problem of infrequent, compliance‑driven pentesting by enabling faster, real‑world security testing on demand. It benefits us by providing actionable findings, direct collaboration with testers, and quick retesting—allowing security issues to be identified and fixed within normal development cycles instead of long audit timelines.

Doing all the setup within the portal, and speed of organizing pentest in the background.

For Cobalt no, but pentesters always found the same vulnerabilities every time, even if we marked as false positive.

pentesting

It’s easy to use, and they offer a strong support system when you need help.

The credit system they use is a little confusing to understand at first, and it took me some time to figure out how it works.

Shows us exactly what a real breach could do. Not just scan and report.

Interactive portal for viewing findings and downloading reports. Slack channel for online collaboration with pentesters and Cobalt staff. API for automated data extraction. Ability to pull data directly from API into Google Sheets using scripts.

The API would benefit from a bit of tidying up and some additional features.

We require pentesting of all our products, and Cobalt provides this service in a user-friendly way.

I use Cobalt for penetration testing in my SaaS healthcare company, and I was really satisfied with it. Cobalt impressed me with their team's responsibility and the smooth onboarding process. Having a really helpful assistant for every aspect I had questions about was a bonus. The tool was really quick, and I found the fix and mitigation phase worked really well, which made us really happy. The initial setup was smooth, and the team was very responsible and responsive. If collaboration or pointing out findings related to my system was needed, Cobalt was really amazing.

I would say that the reporting and the interface of the reports could be better, which is difficult internally. Since we add some findings, I needed to explain really deep to the management about the findings and their impact.

I use Cobalt for penetration tests at our SaaS healthcare company, and I'm really satisfied with its performance.

.The online portal allows easy collaboration with testers

Seem to have limited bandwidth in their customer success organization

Independent

I like that Cobalt follows the timelines and keeps the communication going in every aspect. I also appreciate that we don't have to worry much about the tests. We just provide the setup and they take care of everything else. The initial setup is easy, and the portal has relevant questions to be responded.

One point I feel like the old/previous issues should be tested with the new tests and update their status as well.

Cobalt helps identify security flaws in our products related to access. It ensures we meet timelines and maintains communication. We don't worry much about tests; we set up, and they handle the rest.

I like Cobalt’s on-demand pen testing and the real-time, detailed reporting. They provide a faster path to getting tests started and receiving results, along with continuous findings and integrated reporting that delivers immediate insights. I also appreciate the integrations with ticketing systems, which help streamline workflows and improve efficiency. On top of that, the initial setup was very easy, so getting started felt smooth and straightforward.

Can not think of anything! Works like a charm.

Cobalt helps identify vulnerabilities through application penetration testing. I really like the on-demand pen testing, the real-time, detailed reporting, and the integration with our ticketing system. It also provides a faster path to getting tests started and receiving results, with continuous findings and integrated reporting that deliver immediate insights.

The collaboration and support provided are excellent. The team is very organized when conducting pentests, which makes the process smooth and efficient.

The built-in integrations, such as Jira, could use some improvement, but overall, working with the API is satisfactory.

We are focused on eliminating security bugs in our product to enhance the safety of our platform for customers and to strengthen data protection. Cobalt has been a great Partner on achieving this goal.