VAddy

What VAddy is

VAddy is a cloud service for automated black-box security testing of web applications. It scans for issues such as SQL injection, cross-site scripting, remote file inclusion, command injection, and directory traversal. Targets include authenticated applications, SSL sites, URL path parameters, CSRF-token forms, REST APIs with JSON parameters, intranets, and multi-FQDN applications. Scans can run in an existing CI process after code changes, with alerts when a commit contains vulnerabilities. Listed integrations and tools include Jenkins, CircleCI, Codeship, Travis CI, Wercker, a Web API, a Ruby client, and a Go API command tool. Local-environment scanning is also listed. Plans allow unlimited scans but cap scan duration and concurrency. Professional costs ¥19,800 a month, Enterprise ¥59,800 a month, and Advanced ¥99,800 a month. New accounts get Professional-equivalent features for one week; the account is then temporarily suspended until upgraded. Data is stored in Japan, and VAddy says it uses AWS.