--- description: "Comparison between solutions of Fluid Attacks and Escape." keywords: "Fluid Attacks, Continuous Hacking, Escape, application security, vulnerability scanning, DAST tools, support, automated" other: private: false title: Escape --- # Escape import { Table } from "nextra/components"; **How does Fluid Attacks' solution compare to Escape's?** The following comparison table enables you to discern the performance of both providers across various attributes essential for meeting your company’s cybersecurity needs. To better understand each attribute, [read their descriptions in the dedicated page](https://help.fluidattacks.com/portal/en/kb/articles/comparison-categories-description). **Criteria** **Fluid Attacks Essential** **Fluid Attacks Advanced** **Escape** **Accuracy** Our SAST tool achieved the best possible result against the OWASP Benchmark: a TPR (True Positive Rate) of 100% and an FPR [(False Positive Rate) of 0%](https://fluidattacks.com/blog/owasp-benchmark-fluid-attacks/). We identify 90% of the evaluated systems' risk exposure. (Accuracy is calculated with the F1 score. Risk exposure is calculated with the formula [CVSSF=4^(CVSS-4)](https://help.fluidattacks.com/portal/en/kb/articles/accuracy-sla)). They do not show information regarding false positive or false negative rates. **Binary SAST** Yes. We support APK files. Yes. Its capability is equal to that of the Essential plan. No **Languages (Source SAST)** [Yes](https://fluidattacks.com/product/sast/). We support the following [languages and technologies](https://help.fluidattacks.com/portal/en/kb/articles/supported-languages): Android, C#, CloudFormation, Configuration files, Dart, Docker, Docker Compose, Go, HTML, HTML5, jBASE, Java, JavaScript, Kotlin, Kubernetes, PHP, Python, Razor, Shell Scripting, Storybook, Swift, Terraform, TypeScript and YAML. [Yes](https://fluidattacks.com/product/sast/). We support all languages and technologies supported in the Essential plan, as well as the following: ABAP, ActionScript, Apex, Assembler, ATS, Awk, C, C++, Clean, ClojureScript, Colm, cScript, Dale, Elvish, F#, Falcon, Fish, Fortran, Guile, Hana SQL Script, Haskell, Haxe, Idris, Ion, Janet, JCL, Joker, JScript, JSP, Lisp, Lobster, Natural, Nim, Objective C, Pascal, Perl, PL-SQL, PL1, PL/SQL, PowerScript, PowerShell, Prolog, R, RC, RPG4, Rust, Scala, SQL, SQR, Standard ML, T24, TAL, tcsh, Transact-SQL, VB.NET, VBA, VisualBasic 6, XML, among others. No **Frameworks (Source SAST)** [Yes](https://fluidattacks.com/product/sast/). We support the following [frameworks](https://help.fluidattacks.com/portal/en/kb/articles/supported-frameworks): .NET, .NET Core, Angular, ASP.NET, Bootstrap, Django, Express, FastAPI, Flask, Flutter, Ktor, Laravel, Nest, Next.js, Node.js, React Native, React.js, Spring, Spring Boot and Vue.js. [Yes](https://fluidattacks.com/product/sast/). We support all frameworks supported in the Essential plan, as well as the following: Apache Struts, Ember.js, Gatsby, Meteor, Phoenix, Ruby Sinatra, Ruby on Rails, Svelte, Symfony, Tornado, among others. No **DAST** [Yes](https://fluidattacks.com/product/dast/). We scan unauthenticated HTTP endpoints, including headers, DNS records, HTML content, and SSL connections for encryption suites, protocols, and X509 certificates. [Yes](https://fluidattacks.com/product/dast/). Its capability is equal to that of the Essential plan. [Yes](https://escape.tech/solutions/business-case/dast). They scan GraphQL API, REST API and gRPC API. **IAST** No No No **SCA** [Yes](https://fluidattacks.com/product/sca/). We support the following [package managers](https://help.fluidattacks.com/portal/en/kb/articles/supported-package-managers-languages-and-files-in-sca): Cargo, Composer, Conan, Docker Images, GitHub Actions, Go, Gradle, Hex, Maven, NPM, NuGet, pNPM, pip, Poetry, Pub, RubyGems, SBT, SwiftPM and Yarn. [Yes](https://fluidattacks.com/product/sca/). Its capability is equal to that of the Essential plan. No **PTaaS** No [Yes](https://fluidattacks.com/product/ptaas/) No **Reverse engineering** No [Yes](https://fluidattacks.com/product/re/) No **Secure code review** No [ ](https://fluidattacks.com/solutions/secure-code-review/)[Yes](https://fluidattacks.com/solutions/secure-code-review/) No **CSPM** [ ](https://fluidattacks.com/product/cspm/)[Yes](https://fluidattacks.com/product/cspm/) [ ](https://fluidattacks.com/product/cspm/)[Yes](https://fluidattacks.com/product/cspm/) No **ASPM** [ ](https://fluidattacks.com/product/aspm/)[Yes](https://fluidattacks.com/product/aspm/) [ ](https://fluidattacks.com/product/aspm/)[Yes](https://fluidattacks.com/product/aspm/) No **SCM integrations** [Azure DevOps](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization), [Bitbucket](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization), [GitHub](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization) and [GitLab](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization) It offers the [same integrations](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization) as the Essential plan. [Azure DevOps](https://docs.escape.tech/testing/ci-cd/references/azure), [GitHub](https://docs.escape.tech/documentation/inventory/integrations/github/) and [GitLab](https://docs.escape.tech/documentation/inventory/integrations/gitlab/) **Ticketing integrations** [Azure DevOps work items](https://help.fluidattacks.com/portal/en/kb/articles/set-up-the-azure-devops-integration), [GitLab issues](https://help.fluidattacks.com/portal/en/kb/articles/set-up-the-gitlab-integration) and [Jira](https://help.fluidattacks.com/portal/en/kb/articles/set-up-the-jira-integration) It offers the [same integrations](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks) as the Essential plan. [Jira](https://docs.escape.tech/platform/workflows/#automated-actions) **ChatOps integrations** No No [Discord](https://docs.escape.tech/documentation/governance/workflows/discord/), [Microsoft Teams](https://docs.escape.tech/documentation/governance/workflows/teams/) and [Slack](https://docs.escape.tech/documentation/governance/workflows/slack/) **IDE integrations** [VS Code](https://help.fluidattacks.com/portal/en/kb/articles/install-the-vs-code-extension) It offers the [same integration](https://help.fluidattacks.com/portal/en/kb/articles/install-the-vs-code-extension) as the Essential plan. No **CI/CD integrations** AWS CodePipeline, Bamboo, CircleCI, GitHub Actions, GitLab CI, Jenkins, TeamCity, Travis CI, and any other [CI/CD system that supports Docker](https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd#Run_the_Fluid_Attacks_scanner_on_your_CI_CD_provider) It offers the [same integrations](https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd#Run_the_Fluid_Attacks_scanner_on_your_CI_CD_provider) as the Essential plan. [Azure DevOps](https://docs.escape.tech/documentation/dast/ci-cd/azure/), [BitBucket](https://docs.escape.tech/documentation/dast/ci-cd/bitbucket/), [Circle CI](https://docs.escape.tech/documentation/dast/ci-cd/circleci/), [GitHub Action](https://docs.escape.tech/documentation/dast/ci-cd/github/), [GitLab CI](https://docs.escape.tech/documentation/dast/ci-cd/gitlab/) and [Jenkins](https://docs.escape.tech/documentation/dast/ci-cd/jenkins/) **Cloud Integrations** [AWS, Azure and GCP](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-cloud-integrations) It offers the [same integrations](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-cloud-integrations) as the Essential plan. [AWS](https://docs.escape.tech/documentation/inventory/integrations/aws/) and [Azure](https://docs.escape.tech/documentation/inventory/integrations/azure/) **Compliance integrations** No No No **SCA integrations** [Native scanner](https://fluidattacks.com/product/sca/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/sca/) to that of the Essential plan. [Snyk](https://help.fluidattacks.com/portal/en/kb/articles/compare-with-snyk) **SAST integrations** [Native scanner](https://fluidattacks.com/product/sast/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/sast/) to that of the Essential plan. [Snyk](https://help.fluidattacks.com/portal/en/kb/articles/compare-with-snyk) **DAST integrations** [Native scanner](https://fluidattacks.com/product/dast/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/dast/) to that of the Essential plan. [Native scanner](https://escape.tech/solutions/business-case/dast) (included, no integration needed) **IAST integrations** No No No **Secrets integrations** [Native scanner](https://fluidattacks.com/product/sast/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/sast/) to that of the Essential plan. [Native scanner](https://docs.escape.tech/documentation/governance/vulnerability-management/) (included, no integration needed) **Container integrations** [Native scanner](https://fluidattacks.com/systems/containers/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/systems/containers/) to that of the Essential plan. No **CSPM integrations** [Native scanner](https://fluidattacks.com/product/cspm/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/cspm/) to that of the Essential plan. No **Compliance** We validate some [requirements](https://db.fluidattacks.com/req/) based on these [standards and guidelines](https://db.fluidattacks.com/std/): Agile Alliance, BSIMM, BIZEC-APP, BSAFSS, CAPEC™, CASA, C2M2, CCPA, CERT-C, CERT-J, CIS, CMMC, CPRA, CWE™, CWE TOP 25, ePrivacy Directive, FACTA, FCRA, FedRAMP, FERPA, FISMA, GDPR, GLBA, HIPAA, HITRUST CSF, ISA/IEC 62443, ISO/IEC 27001, ISO/IEC 27002, ISSAF, LGPD, MITRE ATT&CK®, MISRA-C, MVSP, NERC CIP, NIST 800-53, NIST 800-63B, NIST 800-115, NIST 800-171, NIST CSF, NIST SSDF, NYDFS, NY SHIELD Act, OSSTMM3, OWASP API Security Top 10, OWASP ASVS, OWASP MASVS, OWASP-M TOP 10, OWASP SAMM, OWASP SCP, OWASP Top 10 Privacy Risks, OWASP TOP 10, PA-DSS, PCI DSS, PDPA, PDPO, POPIA, PTES, Resolution SB 2021 2126, SANS 25, SIG Core, SIG Lite, SOC2®, SWIFT CSCF, WASC and WASSEC. We validate all the [requirements](https://db.fluidattacks.com/req/) according to the same [standards and guidelines](https://db.fluidattacks.com/std/) as the Essential plan. They validate requirements based on these [standards and guidelines](https://docs.escape.tech/documentation/governance/compliance/): CWE, FedRAMP, GDPR, HIPAA, HITRUST CSF, HDS, ISO/IEC 27001, MITRE ATT&CK, NIST, NIS2, [OWASP API Security Top 10](https://escape.tech/blog/owasp-api-security-checklist-for-2023/), OWASP TOP 10, PCI-DSS, PSD-2, SOC 2, WASC, among others. **Certifications or attestations** [SOC 2 Type II](https://trust.fluidattacks.tech/resources?s=xat56qr2ajdont2hyj85hf&name=soc-2-type-2-report-202407-pdf) and [SOC 3](https://trust.fluidattacks.tech/resources?s=fyik1uuqzj228tg31cpig&name=soc-3-report-202408-pdf) It is covered by the same [certifications and attestations](https://trust.fluidattacks.tech/) as the Essential plan. [SOC 2 Type II](https://escape.tech/blog/escape-is-now-soc-2-type-ii-compliant/) **Marketplaces** [AWS](https://aws.amazon.com/marketplace/pp/prodview-hjaxsy2ne7yua?sr=0-1&ref_=beagle&applicationId=AWSMPContessa) It is available in the [same marketplace](https://aws.amazon.com/marketplace/pp/prodview-hjaxsy2ne7yua?sr=0-1&ref_=beagle&applicationId=AWSMPContessa) as the Essential plan. [AWS](https://aws.amazon.com/marketplace/pp/prodview-yffo3s4uoj7zs?sr=0-1&ref_=beagle&applicationId=AWSMPContessa) **Fast and automatic** [ Yes](https://help.fluidattacks.com/portal/en/kb/articles/configure-the-tests-by-the-standalone-scanner) [ Yes](https://help.fluidattacks.com/portal/en/kb/articles/configure-the-tests-by-the-standalone-scanner) [Yes](https://escape.tech/solutions/business-case/automated-pentests) **Remediation** We provide detailed [documentation](https://help.fluidattacks.com/portal/en/kb/find-security-vulnerabilities) on fixes and features both on our platform and in our [IDE extension](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-ide-extensions/vs-code-extension), which uses generative AI to offer [custom step-by-step](https://help.fluidattacks.com/portal/en/kb/articles/get-ai-generated-guides-for-remediation) correction guidance. Additionally, our IDE extension leverages gen AI to offer [automated fixes](https://help.fluidattacks.com/portal/en/kb/articles/fix-code-automatically-with-gen-ai) capabilities. In addition to the Essential plan features, we offer the option of "[Talk to a hacker](https://help.fluidattacks.com/portal/en/kb/articles/talk-to-a-hacker)" in which our experts help clients understand how to remediate the most challenging vulnerabilities. They offer documentation on [fixes](https://docs.escape.tech/documentation/governance/vulnerability-management/) and remediation guidance for security vulnerabilities. **CI/CD security** We can integrate with [CI/CD systems](https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd) and trigger a build pipeline failure to prevent from deploying a noncompliant software version into production ([break the build](https://help.fluidattacks.com/portal/en/kb/articles/prevent-the-deployment-of-builds-with-vulnerabilities)). Its [capability is equal](https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd) to that of the Essential plan. They can integrate with [CI/CD systems](https://docs.escape.tech/documentation/dast/ci-cd/) and trigger a build pipeline failure to prevent from deploying a noncompliant software version into production ([break the build](https://docs.escape.tech/documentation/dast/)). **Vulnerability detection method** [ ](https://fluidattacks.com/plans/#essential)[Automated tools](https://fluidattacks.com/plans/#essential) [Hybrid](https://fluidattacks.com/solutions/application-security) (automated tools + AI + human intelligence) [Automated tools](https://escape.tech/solutions/business-case/automated-pentests) and [AI](https://escape.tech/company) **Vulnerability chaining** No By [combining vulnerabilities A and B](https://fluidattacks.com/product/mpt/), we discover a new, higher impact vulnerability C. No **Delivery of evidence** Our evidence is delivered in (a) [PDF executive reports](https://help.fluidattacks.com/portal/en/kb/articles/download-a-report-of-detected-vulnerabilities#Download_a_groups_vulnerability_report), (b) [XLSX technical reports](https://help.fluidattacks.com/portal/en/kb/articles/download-a-report-of-detected-vulnerabilities#Download_a_groups_vulnerability_report), (c) [code pieces](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#See_the_vulnerable_line_of_code) and (d) [graphs and metrics of the system's security status](https://help.fluidattacks.com/portal/en/kb/articles/common-analytics#Exposure_management_over_time). We deliver all the types of evidence mentioned in the Essential plan, and additionally, (a) [video recordings of the attack](https://help.fluidattacks.com/portal/en/kb/articles/examine-the-evidence-of-exploitability) and (b) [screenshots with explanatory annotations](https://help.fluidattacks.com/portal/en/kb/articles/examine-the-evidence-of-exploitability). Their evidence is [delivered](https://docs.escape.tech/documentation/governance/reporting/?h=report) in (a) PDF format, (b) a format compatible with Postman, and (c) graphs and metrics. **Exploitation** No We can do [exploitation](https://fluidattacks.com/products/ptaas) as long as the client provides an available environment. No **Zero-day vulnerabilities** No Our security researchers search for [zero-day vulnerabilities](https://fluidattacks.com/solutions/vulnerability-management/) in open-source software. No **AI/ML triage** No Using artificial intelligence (AI), we [prioritize](https://help.fluidattacks.com/portal/en/kb/articles/introduction-to-fluid-attacks-ai-tool) potentially vulnerable files for assessment. Our AI is specially trained by machine learning (ML) with thousands of snippets of vulnerable code. No **Deployment** [SaaS](https://fluidattacks.com/platform/) Same as the [Essential plan](https://fluidattacks.com/platform/). [SaaS and on-premises](https://docs.escape.tech/documentation/enterprise/deployment-options/) **Open source** [Yes](https://help.fluidattacks.com/portal/en/kb/articles/open-source). [MPL-2.0](https://gitlab.com/fluidattacks/universe/-/blob/trunk/LICENSE?ref_type=heads) license. Totally equivalent to the [paid version](https://fluidattacks.com/plans/). [Yes](https://help.fluidattacks.com/portal/en/kb/articles/open-source). [MPL-2.0](https://gitlab.com/fluidattacks/universe/-/blob/trunk/LICENSE?ref_type=heads) license. Partially equivalent to the [paid version](https://fluidattacks.com/plans/). No **Year founded** [2001](https://fluidattacks.com/about-us/) Same founding year as the [Essential plan](https://fluidattacks.com/about-us/). [2020](https://escape.tech/company/) **Number of employees** [139](https://www.linkedin.com/company/fluidattacks/insights/) Same number of employees as the [Essential plan](https://www.linkedin.com/company/fluidattacks/insights/). [70](https://www.linkedin.com/company/escapetech/insights/) **Other services** Focus on [automated offensive testing](https://fluidattacks.com/) for applications in development. Focus on both [automated and manual offensive testing](https://fluidattacks.com/) for applications in development. Focus on [DAST](https://escape.tech/) and [API security](https://escape.tech/product#api-security-at-scale). **Reputation sites (On a scale of 1 to 10)** Between 9.16 and 10.00 based on 31 reviews over 6.3 years from the following 3 sources: [Clutch](https://clutch.co/profile/fluid-attacks#highlights), [Gartner Peer Insights](https://www.gartner.com/reviews/market/application-security-testing/vendor/fluid-attacks/product/continuous-hacking) and [PeerSpot](https://www.peerspot.com/products/fluid-attacks-reviews). Same reviews and ratings as the Essential plan. Between 8.57 and 10.00 based on 5 reviews over 7 months from the following 2 sources: [Capterra](https://www.capterra.com/p/245904/Escape/) and [G2](https://www.g2.com/products/escape/reviews). **Status page** [Yes](https://status.fluidattacks.tech/) [Yes](https://status.fluidattacks.tech/) [Yes](https://status.escape.tech/) **Demo** [ ](https://fluidattacks.com/contact-us/)[Yes](https://fluidattacks.com/contact-us/) [ ](https://fluidattacks.com/contact-us/)[Yes](https://fluidattacks.com/contact-us/) [Yes](https://calendly.com/d/46g-xzy-dgw?_gl=1*1n63dow*_gcl_au*NzM0NDAyNDcyLjE3MjQ2NzIwNzA.*_ga*MTc1MDM1MTUuMTcyNDY3MjA3MA..*_ga_5FTS8Y5Z4N*MTcyNDY3MjA3MC4xLjEuMTcyNDY4Mzk0Ni42MC4wLjEzNzMzNzMyMjk.) **Free trial** [ ](https://app.fluidattacks.com/SignUp)[Yes](https://app.fluidattacks.com/SignUp) [PoV](https://help.fluidattacks.com/portal/en/kb/articles/continuous-hacking-pov#Scope) [Yes](https://auth.escape.tech/u/signup/identifier?state=hKFo2SBEZ2FSU2ZtQXUwYndPMXdueVV2dTJvd1FBU1NST3lSb6Fur3VuaXZlcnNhbC1sb2dpbqN0aWTZIHkzSGtjLXFWSkdnLUpoTHJHNlVDUExMTFUyVGw0YlhWo2NpZNkgTlFIdG15MzVYOWhBd0hUVjloWklJT0xhRjNKYmhIbUQ)

> [!TIP] > > **References were last checked on Aug 26, 2024.** > [!TIP] > > **Free trial** > Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your [21-day free trial](https://app.fluidattacks.com/SignUp) and discover the benefits of the [Continuous Hacking](https://fluidattacks.com/services/continuous-hacking/) [Essential plan](https://fluidattacks.com/plans/). If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out [this contact form](https://fluidattacks.com/contact-us/).