Blacklock
Blacklock: Affordable DAST with authenticated scans, API testing, automation, and developer remediation guidance. Ranked #17 of 29 in Web Application Security Scanners by our editors (7.8/10); pricing: 14-day trial; best for teams wanting affordable DAST with integrations.
At a glance
- Editor score7.8 / 10
- Pricing14-day trial
- Best forTeams wanting affordable DAST with integrations
- Free planNo
- Paid from$85/mo
- Authenticated scansYes
- Facts checked19 Sep 2026

Where it wins
- Authenticated and unauthenticated web application scanning
- REST API testing with scheduled and on-demand scans
- CI/CD, issue tracking, identity, and compliance integrations
Where it doesn't
- No free plan; the free trial lasts 14 days
- Pricing is based on applications, IPs, APIs, and repositories
- The published plan focuses on vulnerability scanning
Our verdict on Blacklock
Blacklock is a cloud-first penetration-testing-as-a-service platform for organisations securing web applications and REST APIs. It combines authenticated and unauthenticated DAST with scheduled or on-demand scanning, CI/CD integration, vulnerability reporting, remediation guidance, and targeted retesting. Teams that need recurring application and API security checks, rather than a standalone one-time scan, are the clearest fit.
According to the vendor's pricing page, the Vulnerability Scanning plan costs USD 85 per month, billed monthly, with a 14-day free trial and no free plan. The plan includes authenticated and unauthenticated web application scanning, REST API endpoint scanning, unlimited scheduled and on-demand vulnerability scans, OWASP-compliant reports, and Blacklock API access. The vendor states that pricing is based on the number of web applications, live IP addresses, REST APIs, and repositories, so the starting price is not a per-user rate. Paid capabilities also include real-time results, compliance-oriented reporting, developer remediation code, and targeted vulnerability retesting.
Blacklock connects with GitHub, GitLab, Bitbucket, Azure DevOps, Jira, Vanta, Microsoft Entra ID, Okta, SSO/SAML, Zapier, and Salesforce. Browser-assisted authenticated scanning and CI/CD support make it relevant to development teams that want security checks in delivery workflows, while API access supports integration with internal processes. Its scope covers web applications and APIs, alongside broader offerings for infrastructure and source code, but the listed plan centers on vulnerability scanning. Choose Blacklock if integrated DAST, authenticated testing, scheduled coverage, and remediation workflow support matter more than a broad range of published plans. Teams seeking a product centered on a different security scope should compare alternatives designed specifically for that focus.
Your product? Our editors can test Blacklock in depth and publish a review, labelled as paid · from $149/mo →
Blacklock pricing
All 1 Blacklock plans and prices →
Blacklock fact sheet
| Free plan | No |
|---|---|
| Paid from | $85/mo |
| Deployment | Cloud |
| Authenticated scans | Yes |
| JavaScript crawling | Not verified |
| Scheduled scans | Yes |
| Compliance reports | Yes |
| API scanning | Yes |
| Target limit | Not verified |
| Free trial | 14 days |
| Deployment | Cloud |
| Platforms | Web |
| Integrations | 11 integrations: GitHub, GitLab, Bitbucket, Azure DevOps, Jira, Vanta … |
| Pricing | 14-day trial (source) |
| Website | blacklock.io |
| Facts checked | 19 Sep 2026 |
Blacklock integrations
Blacklock lists 11 integrations on its own site.
- GitHub
- GitLab
- Bitbucket
- Azure DevOps
- Jira
- Vanta
- Microsoft Entra ID
- Okta
- SSO/SAML
- Zapier
- Salesforce
Alternatives to Blacklock
- ZeroThreatDeep web and API coverage with flexible free, cloud, pay-per-scan, and on-premises options.9.4
- Burp Suite DASTBroad, enterprise-focused DAST for authenticated web apps, APIs, and CI/CD workflows.9.3
- EscapeDeep testing for complex applications, APIs, workflows, and access controls.9.2
See all Blacklock alternatives →
Used Blacklock? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Blacklock for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Blacklock is listed in our Web Application Security Scanners directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/blacklock/"><img src="https://www.itechguides.com/best/badge/blacklock.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update



