Detectify

Can’t wait for this Wednesday! RSVP below:

In cybersecurity, an inaccessible tool isn’t just "an inconvenience": it’s a vulnerability. We’re rebuilding our front-end from the ground up to eliminate any potential “usability tax” that could lead to missed alerts. Because when a dashboard is a barrier, the tool itself becomes part of the attack surface. Check out this blog by our Product Design Lead Miriana Giai Gischia https://lnkd.in/dnG624Ec

New office, new year, same community. We are opening the doors to the new Detectify office and inviting our community to an Office Warming AW. Join us for an evening with peers and the hackers who inspire us. There’ll be food, drinks, and lightning talks, plus an exclusive glimpse into what we’ve been building lately. We will share fresh research and experiments around AI/ML and large-scale security testing, and we are excited to have ethical hacker and security expert David Jacoby joining us to present new research on vulnerabilities in everyday Bluetooth devices. When: January 28, 17:30–21:00 Where: Kornhamnstorg 6, 111 27 Stockholm Whether you collaborate with us, hack with us, or are part of our wider community, we would love to kick off the year together. https://lnkd.in/gAASBNzP

Choosing a DAST solution in 2026 isn't about checking a compliance box: it's about choosing a philosophy. We analyzed the top players to build the ultimate selection framework. Download here: https://lnkd.in/dRtW_iGh

Managing a modern attack surface is even more complicated than defending a house all by yourself (there are parts to protect you didn't even know about!). Attackers are circling, and you need a solid battle plan. Be like Kevin. Be prepared. Go hack yourself: detectify.com

2025 was a relentless year for AppSec. Our researchers have compiled the top vulnerabilities of the year, including some massive CVSS 10.0 threats. Are you testing for all of them?

2025, what a year. Check out what we've been working on. From launching the next generation of assessments with unlimited payloads to closing the gap between "knowing what you have" (ASM) and "testing what you have" (DAST).

Choosing an AppSec platform is noisy. Everyone claims to be the fastest and most accurate. So, we stripped away the marketing fluff and compared the market leaders against 8 strict technical criteria. If you want to know which solution is the best for you, this is the only comparison you need. Download the 2026 Buyer's Guide: https://lnkd.in/dRtW_iGh

🚨 Critical Alert: Next.js & React RCE (CVE-2025-55182) allows unauthenticated code execution via malformed requests with CVSS 10.0. If you use App Router or Server Components, patch immediately (React 19.2.1+ / Next.js 15.0.5+). Detectify customers can already scan for this. https://lnkd.in/dEkd43jw

At Detectify, we are increasingly discussing next-generation assessments. With many releases to come in this area, one that is now available is the Dynamic Payload Rotation engine of our API Scanner. So, how does it work? ⚙️ Instead of relying on a static list, it utilizes a near-infinite pool of payloads, mixing constant checks with experimental variations. It leverages machine learning: if an experimental payload succeeds, it is immediately reused in future tests for that specific tech stack. Check it out: