Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Strobes ASPM review

Freemium#3 of 17 in Application Security Posture Management SoftwareApplication Security Orchestration Platforms

A broad ASPM platform with a useful free tier and a high paid entry point.

9.1/10Editor score
Visit Strobes ASPM
Strobes ASPM9.1 Visit Strobes ASPM

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Strobes ASPM brings application-security findings into a normalized view across the software development lifecycle. It is designed for organizations that need application-level visibility across SAST, DAST, SCA, API, cloud, container, secret, runtime, and penetration-testing inputs. The platform correlates and deduplicates findings, scores risk using exploitability, asset criticality, EPSS, and CISA KEV, and provides dashboards for security and executive audiences. It also supports ownership mapping, CI/CD security gates, ticket creation, SLA tracking, and remediation verification.

Pricing follows a freemium model. The Free plan costs $0 forever and includes ASM, RBVM, ASPM, and community support. Starter costs $29,000 per year, billed annually, and adds unlimited connectors and email support while retaining ASM, RBVM, and ASPM. Growth costs $45,000 per year, billed annually, and adds unlimited users plus a dedicated CSM. Enterprise includes ASM, RBVM, ASPM, unlimited connectors and users, TAM, SLA, and a custom MSA, with pricing handled through sales. The free plan offers a low-friction way to assess the platform, while the paid tiers are aimed at organizations with larger operational and support requirements.

Its ecosystem coverage is a central strength. Strobes connects with GitHub, GitLab, Jira, Azure DevOps, GitHub Actions, Jenkins, Slack, Microsoft Teams, Checkmarx, Snyk, Burp Suite, ZAP, Trivy, AWS, and Azure. REST API access, SBOM generation from GitHub repositories, automatic routing to code owners, and rescans or merges for fix verification support workflows that span development and security teams. Organizations seeking consolidated risk management across many tools should consider Strobes ASPM, while teams needing only one focused scanner may find its broader scope and paid pricing difficult to justify.

Strobes ASPM pros and cons

  • Where it wins
    • Correlates, deduplicates, scores, routes, and verifies security findings
    • Native SAST, DAST, SCA, API, cloud, container, and secret scanning
    • Integrates with development, ticketing, cloud, and security tools
  • Where it doesn't
    • Starter costs $29,000 per year, billed annually
    • The free plan includes community support rather than email support
    • Its broad feature set may exceed the needs of narrowly focused teams

Strobes ASPM fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update