- Home
- Dynamic Application Security Testing Software
- Indusface WAS
Indusface WAS
Vadodara, Gujarat, India
What it is
Indusface WAS is a cloud-based web application security scanner that uses dynamic application security testing to identify vulnerabilities. Its scans cover OWASP Top 10, SANS Top 25, zero-day issues, cross-site scripting, SQL injection, and other vulnerabilities. Certified security researchers can also perform manual penetration testing for business logic vulnerabilities. Findings include remediation guidance and screenshot-based proof-of-vulnerability walkthroughs; the maker says AI and human review are used to check findings and eliminate false positives. WAS can trigger scans on new CI/CD builds, create vulnerability tickets, and send scan logs to major SIEM providers. Listed scan options include authenticated and guided scans, vulnerability revalidation, out-of-band detection, malware scans, and infrastructure vulnerability scans. Automated scans can be scheduled as needed, with daily scans listed as an add-on. The Advance plan costs $59 a month per app and offers a 14-day free trial. The pricing note lists a starting figure of $99/mo. Premium and MSSP Edition have custom pricing; MSSP Edition includes a consultant-branded dashboard and reports. Support options include unlimited email support and business-hours on-call support for WAS; Premium lists support by email, phone, and chat 24×7×365.
For and against
For
- Scans cover OWASP Top 10 and SANS Top 25.
- Certified researchers can test for business logic vulnerabilities.
- Findings include remediation guidance and screenshot walkthroughs.
- Can trigger scans on new CI/CD builds.
- Advance includes a 14-day free trial.
Against
- No free plan is listed.
- Advance costs $59 a month per app.
- Premium and MSSP Edition use custom pricing.
- Daily scans are listed as an add-on.
The verdict
Indusface WAS pairs automated scanning with manual penetration testing and remediation details. Review the per-app Advance price and the custom pricing for higher-tier plans when evaluating it.
Who it suits
WAS may suit teams seeking web application scanning, manual testing for business logic vulnerabilities, and remediation guidance. Its MSSP Edition is aimed at consultants and managed security service providers needing a consultant-branded dashboard and reports.
Plans and prices
Advance
$59/App/Month
Read 3 Oct 2026 · indusface.com
Advance
$599/App
Read 3 Oct 2026 · indusface.com
MSSP Edition
Custom pricing; consultant-branded dashboard and reports
Read 3 Oct 2026 · indusface.com
Premium
Custom pricing
Read 3 Oct 2026 · indusface.com
On the record
- Company history
- Indusface says it was set up in 2004, initially as a consultancy focused on compliance requirements.indusface.com · read 3 Oct 2026
- Compliance
- Indusface lists PCI DSS v4.0.1, ISO/IEC 27001:2022, GDPR compliance, SOC 2 Type II, and CERT-In security auditor empanelment.indusface.com · read 3 Oct 2026
- Integrations
- WAS can trigger scans on new CI/CD builds, create vulnerability tickets, and send scan logs to major SIEM providers.indusface.com · read 3 Oct 2026
- Pen testing
- Certified security researchers can perform manual penetration testing to find business logic vulnerabilities.indusface.com · read 3 Oct 2026
- Product
- Indusface WAS is an AI-powered dynamic application security testing scanner for web application security.indusface.com · read 3 Oct 2026
- Remediation
- Findings include detailed remediation guidance and proof-of-vulnerability walkthroughs with screenshots.indusface.com · read 3 Oct 2026
- Scan features
- The pricing page lists authenticated and guided scans, vulnerability revalidation, out-of-band detection, malware scans, and infrastructure vulnerability scans.indusface.com · read 3 Oct 2026
- Scan scheduling
- Automated scans can be scheduled as needed, including daily scans, as an add-on shown on the pricing page.indusface.com · read 3 Oct 2026
- Support
- WAS support is available 24×7×365 by email, phone, and chat on Premium; the page lists unlimited email support and business-hours on-call support for WAS.indusface.com · read 3 Oct 2026
- Support response
- For manual vulnerability verification, the support page lists 24-hour response for critical, 48 hours for high, and 72 hours for medium findings.indusface.com · read 3 Oct 2026
- Target use
- The maker describes the scan suite as serving application security needs and provides a co-branded dashboard, reports, and consultant workflows for MSSPs and consultants.indusface.com · read 3 Oct 2026
- Trial
- The Advance plan offers a 14-day free trial.indusface.com · read 3 Oct 2026
- Verification
- The maker says scan findings are checked using AI and human intervention to eliminate false positives.indusface.com · read 3 Oct 2026
- Vulnerability coverage
- It scans for OWASP Top 10, SANS Top 25, zero-day, and other vulnerabilities, including cross-site scripting and SQL injection.indusface.com · read 3 Oct 2026
