Since using the product, we discovered quite a few vulnerabilities and security misconfigurations in our environment which were previously overlooked. It also provided us with actions to take, and prioritized the risks for us, so we knew what to focus on fixing first. Best of all, as time marches forward, the product keeps aware of the changes to your infrastructure automatically, and will keep you informed of new risks and exposures that your environment may have. It's a fantastic tool to help you be proactive at preventing cracks from forming in your infrastructure

The tool automatically monitors for changes in the security posture of the assets under management. This tool automatically scans and explores the domain and subdomains, and other DNS records for items to monitor, and then automatically scans these assets for known vulnerabilities, versions, and highlights common security misconfigurations and items you may overlook, such as ensuring strict transport security is enforced. The support team has been great to work with. It was entirely painless to get set up and have a huge breadth of monitoring and awareness, right from the start with very little effort or time required. For the money, you get a lot of visibility, depth, notifications, and value out of the product. I'm very glad we are using it.

The product does a good job of showing you changes over time, but (and this is really minor) it would be useful to keep the history of a previously mitigated vulnerability/risk to know exactly what it was mapped to.

FractalScan allowed be to better support my clients. As a security testing company, we need to help our customers identify, test and reduce risk. FractalScan has empowered myself and my team more easily and quickly identify risk with our customers.

What I appreciate the most about FractalScan is the level of accuracy this platform provides while maintaining a passive approach to data collection. As someone who works in technical sales and consulting, I have a lot of clients working with products in this space. The common problem is the overwhelming amount of results and the operational overhead required to make those results actionable. FractalScan's unique solution provides results that are immediately accurate and actionable.

The current public API is lacking some key features to support full process integration. While this is what I like least about the current product, I do have to add that this "complaint" will not last long. The FractalScan team takes feedback very seriously and actively work to dev the gaps that their customers highlight. While this is current gap, I do not foresee this being a gap much longer.

Easy to use, easy to configure, straightforward results and details.

Domain based scanning with effective reporting and reliable results.

Out of the box integrations with ticketing solutions would be nice.

We may not be privy to sites or sub-domains other parts of the business may implement. FractalScan gives us a discovery tool to identify previously unknown public infrastructure, we can reduce our external attack surface by identifying and resolving issues and getting "old" public infrastructure decommissioned.

Simplicity - give it a domain and it will find out what it can about subdomains, related domains and any issues it identifies with them.

FractalScan sometimes identifies unrelated domains as being related, so there is some clean up of the discovery required.

Using Fractal Scan and working with the team at Red Maple has been an absolute pleasure. Fractal Scan is a powerful but elegant tool that we use to protect ourselves as well as to help other clients.

It's simplicity and ease of set up - you get extensive results just from entering one domain name

Some of the language is tech heavy - it could be dumbed down just a little for the non expert user