Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Astra Security review

Affordable cloud DAST with deep scanning, though the entry tier covers one target.

8.8/10Editor score
Astra Security8.8 Visit Astra Security

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Astra Security is a cloud-based SaaS security platform for engineering, security, DevOps, and compliance teams. Its DAST scanner assesses web applications and APIs, including applications behind login walls and JavaScript-heavy single-page applications. The product also supports vulnerability rescans, scheduled recurring scans, AI-driven remediation guidance, compliance views and reports, and CI/CD integrations.

The published monthly plans show three paid options. Scanner Lite costs $69 per month and includes one target, three monthly vulnerability scans, authenticated scans, one integration, and 15,000+ vulnerability test cases. Scanner costs $199 per month and keeps one target while adding unlimited vulnerability scans, unlimited integrations, and a compliance view. Scanner Agency costs $499 per month and provides a five-target pool, unlimited scans, authenticated scans, a compliance view, and a customer success manager. A free plan is also available.

Its technical coverage is broader than basic unauthenticated website checks. Astra can crawl JavaScript-heavy applications, scan REST, SOAP, and GraphQL APIs, and connect with GitHub, GitLab, Jenkins, CircleCI, Azure DevOps, Slack, and Jira. That combination suits teams that want security checks connected to development and issue-tracking workflows. Teams with one application and limited scanning frequency can start with Scanner Lite, while agencies may value the five-target pool and customer success manager. Organizations needing more than one target without moving to the agency tier, or those seeking open-source deployment, should consider an alternative.

Astra Security pros and cons

  • Where it wins
    • Authenticated scanning for login-protected applications
    • JavaScript, REST, SOAP, and GraphQL API scanning
    • CI/CD, compliance, remediation, and rescan capabilities
  • Where it doesn't
    • Scanner Lite is limited to one target
    • Scanner Lite includes three monthly vulnerability scans
    • No open-source deployment option

Astra Security fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update