Holm Security Web Application Security
Holm Security Web Application Security: A hybrid security service for authenticated apps, APIs, and external attack-surface coverage. Ranked #16 of 26 in Dynamic Application Security Testing Software by our editors (7.9/10); pricing: Pricing on request; best for hybrid teams needing DAST plus attack-surface coverage.
At a glance
- Editor score7.9 / 10
- PricingPricing on request
- Best forHybrid teams needing DAST plus attack-surface coverage
- Free planNo
- Authenticated scanningYes
- Facts checked22 Sep 2026

Where it wins
- Scans authenticated, unauthenticated, and JavaScript applications
- Combines DAST, SCA, OWASP assessment, and CMS detection
- Supports cloud, on-premises, CI/CD, SIEM, and ticketing workflows
Where it doesn't
- Quote-based pricing limits straightforward plan comparison
- Broad coverage may exceed the needs of DAST-only teams
- Deployment and integration scope may require security-team coordination
Our verdict on Holm Security Web Application Security
Holm Security Web Application Security is a vulnerability assessment service for organizations testing internet-facing and local web applications. It is aimed at hybrid security and development teams that need authenticated and unauthenticated scanning across web applications, JavaScript applications, and APIs. The service combines Dynamic Application Security Testing with Software Composition Analysis, and includes OWASP Top 10 assessment, CMS vulnerability detection, prioritization, remediation workflow, reporting, and attack-surface management. REST API scanning uses OpenAPI specifications, while SOAP API detection and scanning extend coverage to older integration environments.
Pricing is contact-based, with licensing tied to assessed web applications or URLs. The published commercial model does not present a self-serve free plan or a numeric entry price, so buyers will need a quote to evaluate cost against application scope. Deployment can be cloud-based or on premises, giving organizations a choice between hosted delivery and local operation. That hybrid model fits teams with varied application environments, but the breadth of the service means pricing and rollout should be assessed around the number of applications, URLs, and required integrations.
Its strongest differentiator is the combination of application testing and external exposure coverage. Integrations include CI/CD, SIEM, ticketing systems, CMDB, patch management, and a platform API, supporting links between discovery, findings, remediation, and operational workflows. Teams that want one service spanning web, API, software composition, and attack-surface assessment should consider Holm Security. Organizations seeking only a focused DAST scanner, or buyers who require transparent public pricing before engaging sales, may prefer a narrower or more openly priced alternative.
Your product? Our editors can test Holm Security Web Application Security in depth and publish a review, labelled as paid · from $149/mo →
Holm Security Web Application Security pricing
Holm Security Web Application Security fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Authenticated scanning | Yes |
| API testing | Yes |
| Browser-based scanning | Yes |
| CI/CD integration | Yes |
| Deployment model | Hybrid |
| Included scan targets | Not verified |
| Deployment | Cloud, Self-hosted |
| Platforms | Web |
| Compliance & security | GDPR, ISO 27001, PCI DSS, SSO/SAML |
| Support | Phone, Tickets, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 15 integrations: IBM QRadar, guardsix, Splunk, Microsoft Sentinel, Slack, Microsoft Teams … See all → |
| Pricing | Pricing on request (source) |
| Website | holmsecurity.com |
| Facts checked | 22 Sep 2026 |
Holm Security Web Application Security integrations
Holm Security Web Application Security lists 15 integrations on its own site.
- IBM QRadar
- guardsix
- Splunk
- Microsoft Sentinel
- Slack
- Microsoft Teams
- ServiceNow
- Atlassian Jira
- TOPdesk
- Azure Active Directory
- ADFS
- Okta
- OneLogin
- Webhooks
- BeyondTrust
See all Holm Security Web Application Security integrations →
Alternatives to Holm Security Web Application Security
- Safeguard DASTBroad authenticated web and API scanning with paid plans starting at $9/month.9.4
- OWASP ZAPA capable free DAST tool with broad web, API, browser, and automation coverage.9.3
- apPosture DASTEvidence-backed DAST for developers who need deep web and API testing.9.2
See all Holm Security Web Application Security alternatives →
Also Ranked In
Holm Security Web Application Security is ranked in 2 of our directories.
Used Holm Security Web Application Security? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Holm Security Web Application Security for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Holm Security Web Application Security is listed in our Dynamic Application Security Testing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/holm-security-web-application-security/"><img src="https://www.itechguides.com/best/badge/holm-security-web-application-security.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update


