TrojAI

Last updated: Nov 4, 2026

How does Fluid Attacks' solution compare to TrojAI's?

These tables compare the solutions of the two providers, attribute by attribute. Use them to compare the solutions for the cybersecurity requirements of your company. To learn what each attribute means, read the descriptions of the attributes.

This comparison is about the product. Some attributes use information from A10 Networks, the parent company of the product.

Organization

Attribute	Essential	Advanced	TrojAI
Focus	Native ASPM with in-house scanners	AI-powered PTaaS on top of native ASPM with in-house scanners	AI agent security
Extras	None	None	None
Headcount	186	Same	9
Headcount distribution	Engineering 42%, IT 12%, sales 16%, marketing 2%, operations 4% and others 24%	Same	Engineering 78%, IT 11%, sales 11% and marketing 11%
Headcount growth	+3%, +21%, +29%	Same	-65%, -65%, -71%
Headquarters	CO and US	Same	CA and US
Countries	AR, BO, BR, CL, CO, CR, DO, EC, MX, PA, PE and US	Same	CA and US
Reputation	9.27 from 388 reviews over 7 years on Clutch, G2 and Gartner	Same	7.20 from 8 reviews over 1 year on Gartner
Followers	23K based on the following: Facebook, Instagram, LinkedIn, X and YouTube	Same	9K based on the following: Facebook, LinkedIn, X and YouTube
Research firms	None	None	IDC
Founded	2001	Same	2019
Funding	Bootstrapped	Same	$8.7M USD in 5 rounds from 8 investors
Acquisitions	None	None	Acquired 1 time and made 0 acquisitions
Revenue	10M to 15M	Same	1M to 10M
Third-Party CVEs Discovered	289 CVEs reported to MITRE, ranked in the top 10 CVE labs worldwide	Same	None
Compliance	GDPR, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, ISO/IEC 27701:2019, PCI DSS, SOC 2 Type II and SOC 3	Same	ISO/IEC 27001:2022
Bug bounty	Yes	Yes	No
Visits	64K per month. Top 3: 18% CO, 9% US, 5% BR. Others 68%	Same	20K per month. Top 3: 37% US, 28% GB, 14% IN. Others 21%
Authority	33 out of 100	Same	25 out of 100
Public vulnerability DB	Discovered and third-party	Same	None
Content	Blog, documentation, e-books, glossary, reports, success stories, videos, webinars and white papers	Same	Blog, documentation, news, press releases, reports, solution briefs, videos and webinars
Comprehensive documentation	13 documentation sections, 6 in common and 7 additional	Same	8 documentation sections, 6 in common and 2 additional
Community	Forum	Same	No
Sync training	1 workshop	Same	No
Async training	3 product use courses, all free	Same	No
Distribution	Direct or with any of its 14 partners	Same	Direct or with any of its partners
Marketplaces	AWS	Same	Azure
Freemium	No	No	No
Free trial	21-day free trial	PoV	Free-trial
Demo	Yes	Yes	Yes
Open demo	No	No	No
Pricing	Contact sales and marketplace	Contact sales	Contact sales and marketplace
Pricing tiers	1 plan	1 plan	2 plans (TrojAI Detect and TrojAI Defend). None transparent.
Minimum term	Monthly	Monthly	Annually
Minimum payment period	Monthly	Monthly	Annually
Minimum capabilities	ASPM, binary SAST, containers, CSPM, DAST, IaC, SAST, SCA and secrets	Same plus: AI SAST, API security testing, MAST, PTaaS, RE and SCR	AI red teaming
Minimum scope	10 authors	Same	No information available
Pricing drivers	Authors	Same	No information available
Free implementation	Yes	Yes	No information available
Free support	Yes	Yes	No information available

Service

Attribute	Essential	Advanced	TrojAI
PTaaS	No	Yes	No
Reverse engineering	No	Yes	No
Secure code review	No	Yes	No
Pivoting	No	Yes	No
Exploitation	No	Yes	No
Manual reattacks	Not applicable	Unlimited reattacks	Not applicable
Zero-day vulnerabilities	Scanner-based zero-day vulnerability detection	Continuous zero-day vulnerability research	None
SLA	Availability	Accuracy, availability and response	No information available
Minimum availability	99.95% per year	Same	No information available
After-sale guarantees	No	Yes	No
Accreditations	CNA and Penetration Testing by CREST	Same	None
Pentester certifications	Not applicable	202 from 59 different types	Not applicable
Type of contract	Employee	Same	Employee
Endpoint control	No	Total	No information available
Channel control	No	Total	No information available
Standards	Some requirements from 67 standards, 3 in common and 64 additional	All requirements from the same standards	3 standards, all in common
Detection method	Automated tools	AI, automated tools and human intelligence	AI and automated tools
Remediation	5, 1 in common and 4 additional	Same, plus 1	2, 1 in common and 1 additional
Output	5, 1 in common and 4 additional	Same, plus 2	4, 1 in common and 3 additional

Product

Attribute	Essential	Advanced	TrojAI
ASPM	Yes	Yes	No
API	GraphQL with JSON	Same	REST with JSON
IDE	5 functionalities	Same, plus 1 functionality	No
CLI	Yes	Yes	No
CI/CD	Breaks the build	Same	Does not break the build
Vulnerability sources	18 sources	Same	None
Threat model alignment	Yes	Yes	No
Priority criteria	CVSS v4.0, CVSSF, EPSS, Fixing cost, KEV, Reachability, Transitivity, Use and VLAI	Same	No information available
Custom prioritization	Priority score	Same	No
Scanner origin	In-house	In-house	In-house
SCA	21 package managers	Same	No
AI security	No	Yes	Yes
Reachability	14 languages	Same	No
Reachability type	Deterministic	Same	Not applicable
SBOM	24 package managers	Same	No
Malware detection	Yes	Yes	No
Autofix on components	No	No	No
Containers	4 distributions	Same	No
Source SAST (languages)	14, 6 in common and 8 additional	Same	8, 6 in common and 2 additional
Source SAST (frameworks)	23	Same	No
Custom rules	No	No	No
IaC	6	2	No
Binary SAST	1 type of binary	Same, plus 2 types of binaries	No
DAST	7 attack surface types	Same	No
API security testing	No	4 types of APIs	Yes. No information available
MAST	No	Yes	No
IAST	No	No	No
CSPM	Yes	Yes	No
Secrets	313 secrets types	Same, plus verify other attack vectors and secrets exploitability	Yes. No information available
AI	5 functions, none in common	Same	3 functions, none in common
AI SAST	No	Yes	No
MCP	Yes	Yes	No
Open-source	No	No	No
Deployment	SaaS (multi-tenant)	Same	On-premises (no tenancy information)
Regions	US	Same	Not applicable
Status	Yes	Yes	No
Incidents	3 per year	Same	No information available

Integrations

Attribute	Essential	Advanced	TrojAI
SCM	6	Same	None
Binary repositories	None	None	None
Ticketing	3, 1 in common and 2 additional	Same	1 in common
ChatOps	None	None	2
IDE	3	Same	None
CI/CD	23	Same	None
SCA	Native	Same	None
Container	Native	Same	None
SAST	Native	Same	Native
DAST	Native	Same	None
MAST	None	Native	None
IAST	None	None	None
Cloud	1	Same	None
CSPM	Native	Same	None
Secrets	Native	Same	Native
Remediation	None	None	None
Bug bounty	None	None	None
Vulnerability management	None	None	1
Compliance	None	None	1

Fluid Attacks last updated these tables on 2026-10-13. The primary sources of information were troj.ai and docs.troj.ai. Fluid Attacks also used specialized information-gathering sites, social media, and other sources.

More like TrojAI

Free trial — Search for vulnerabilities in your applications at no cost with the automated security testing of Fluid Attacks. Start your 21-day free trial and see the benefits of the Essential plan. The Advanced plan includes the expertise of the pentesting team of Fluid Attacks. To get the Advanced plan, complete this contact form.