VAddy
VAddy: Authenticated DAST with CI workflows, scheduled scans, and reporting for web applications and APIs. Ranked #20 of 34 in Vulnerability Scanning Software by our editors (7.0/10); pricing: 7-day trial; best for web application teams needing DAST.
At a glance
- Editor score7.0 / 10
- Pricing7-day trial
- Best forWeb application teams needing DAST
- Free planNo
- Deployment modelCloud
- Facts checked20 Sep 2026
Where it wins
- Authenticated scanning for web applications, APIs, and login workflows
- CI integration, Web API, command-line tools, and scheduled scans
- PrivateNet reaches intranet and local development servers
Where it doesn't
- Published starting price is ¥19,800, excluding tax
- Plans list 3 registered FQDNs
- Professional includes only 5 vulnerability checks
Our verdict on VAddy
VAddy is a cloud-based dynamic application security testing service for web application developers and DevOps teams. It sends HTTP requests to test environments, analyzes responses, and supports public web servers, authenticated applications, SPAs, API servers, intranet sites, and local development servers. Its detection coverage includes SQL injection, cross-site scripting, command injection, CSRF, SSRF, XXE, and other web vulnerabilities. Web application teams that need authenticated DAST across development and deployment workflows are the clearest fit.
Pricing is paid-only, with a seven-day trial rather than a permanent free plan. Published pricing starts at ¥19,800 and excludes tax. The Professional plan includes 5 vulnerability checks, 3 registered FQDNs, unlimited scans, a 2-hour scan limit per scan, 1 concurrent scan, CI integration, and Web API access. Enterprise raises coverage to 11 vulnerability checks, extends the scan limit to 5 hours, allows 3 concurrent scans, and adds organization management. Advanced includes 18 vulnerability checks, IPA Safe Web Site checklist coverage, an 8-hour scan limit, batch scanning, and report consolidation. Each listed tier includes 3 registered FQDNs, so teams should assess that limit against their application estate.
VAddy fits development pipelines through Jenkins, Travis CI, and CircleCI integrations, plus command-line tools, Web API access, cron-based scheduled scanning, email alerts, detailed vulnerability results, and PDF reports. Team accounts, organization management, and role-based permissions support shared security operations, while PrivateNet extends scanning to intranet and local development environments through a remote tunnel. Choose VAddy when authenticated web and API scanning, CI use, and varied target environments matter most. Teams seeking a lower published entry price or more than 3 registered FQDNs should compare alternatives.
Your product? Our editors can test VAddy in depth and publish a review, labelled as paid · from $149/mo →
VAddy pricing
All 3 VAddy plans and prices →
VAddy fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Deployment model | Cloud |
| Supported targets | Web applications; authenticated applications; multi-FQDN applications; intranet sites; SPAs; API servers; local development servers |
| Authenticated scanning | Yes |
| Continuous scanning | Yes |
| Asset limit | 3 assets |
| Compliance frameworks | IPA Safe Web Site checklist; OWASP Top 10; OWASP ASVS |
| Free trial | 7 days |
| Deployment | Cloud, Browser extension |
| Platforms | Web, Linux, macOS |
| Compliance & security | ISO 27001 |
| Support | Email, Live chat, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 3 integrations: Jenkins, Travis CI, CircleCI |
| Pricing | 7-day trial (source) |
| Website | vaddy.net |
| Facts checked | 20 Sep 2026 |
VAddy integrations
VAddy lists 3 integrations on its own site.
- Jenkins
- Travis CI
- CircleCI
Alternatives to VAddy
- VorninBroad cloud vulnerability coverage with a free tier for up to five assets.9.4
- IntruderBroad vulnerability coverage with a free tier and expansion paths for larger environments.9.3
- OpenVASA broad open-source scanner with authenticated testing, continuous scans and compliance features.9.0
Also Ranked In
VAddy is ranked in 2 of our directories.
Used VAddy? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used VAddy for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
VAddy is listed in our Vulnerability Scanning Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/vaddy/"><img src="https://www.itechguides.com/best/badge/vaddy.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update