--- description: "Comparison between solutions of Fluid Attacks and GuardRails." keywords: "Fluid Attacks, Continuous Hacking, GuardRails, application security, vulnerability scanning, SAST, DAST, SCA tools, support, automated" other: private: false title: GuardRails --- # GuardRails import { Table } from "nextra/components"; **How does Fluid Attacks' solution compare to GuardRails's?** The following comparison table enables you to discern the performance of both providers across various attributes essential for meeting your company’s cybersecurity needs. To better understand each attribute, [read their descriptions in the dedicated page](https://help.fluidattacks.com/portal/en/kb/articles/comparison-categories-description). **Criteria** **Fluid Attacks Essential** **Fluid Attacks Advanced** **GuardRails** **Accuracy** Our SAST tool achieved the best possible result against the OWASP Benchmark: a TPR (True Positive Rate) of 100% and an FPR [(False Positive Rate) of 0%](https://fluidattacks.com/blog/owasp-benchmark-fluid-attacks/). We identify 90% of the evaluated systems' risk exposure. (Accuracy is calculated with the F1 score. Risk exposure is calculated with the formula [CVSSF=4^(CVSS-4)](https://help.fluidattacks.com/portal/en/kb/articles/accuracy-sla)). They do not show information regarding false positive or false negative rates. **Binary SAST** Yes. We support APK files. Yes. Its capability is equal to that of the Essential plan. No **Languages (Source SAST)** [Yes](https://fluidattacks.com/product/sast/). We support the following [languages and technologies](https://help.fluidattacks.com/portal/en/kb/articles/supported-languages): Android, C#, CloudFormation, Configuration files, Dart, Docker, Docker Compose, Go, HTML, HTML5, jBASE, Java, JavaScript, Kotlin, Kubernetes, PHP, Python, Razor, Shell Scripting, Storybook, Swift, Terraform, TypeScript and YAML. [Yes](https://fluidattacks.com/product/sast/). We support all languages and technologies supported in the Essential plan, as well as the following: ABAP, ActionScript, Apex, Assembler, ATS, Awk, C, C++, Clean, ClojureScript, Colm, cScript, Dale, Elvish, F#, Falcon, Fish, Fortran, Guile, Hana SQL Script, Haskell, Haxe, Idris, Ion, Janet, JCL, Joker, JScript, JSP, Lisp, Lobster, Natural, Nim, Objective C, Pascal, Perl, PL-SQL, PL1, PL/SQL, PowerScript, PowerShell, Prolog, R, RC, RPG4, Rust, Scala, SQL, SQR, Standard ML, T24, TAL, tcsh, Transact-SQL, VB.NET, VBA, VisualBasic 6, XML, among others. [Yes](https://www.guardrails.io/sast/). They support the following [languages](https://docs.guardrails.io/docs/scanning-techniques/code/introduction) and [technologies](https://docs.guardrails.io/docs/scanning-techniques/cloud/introduction): .Net, Ansible, Apex, Android, [ARM](https://www.guardrails.io/iac/), C, C++, [CloudFormation](https://www.guardrails.io/iac/), Go, [Google Deployment Manager](https://www.guardrails.io/iac/), iOS, Java, Javascript, Kubernetes, PHP, Python, Ruby, Rust, Solidity, [Terraform](https://www.guardrails.io/iac/) and Typescript. **Frameworks (Source SAST)** [Yes](https://fluidattacks.com/product/sast/). We support the following [frameworks](https://help.fluidattacks.com/portal/en/kb/articles/supported-frameworks): .NET, .NET Core, Angular, ASP.NET, Bootstrap, Django, Express, FastAPI, Flask, Flutter, Ktor, Laravel, Nest, Next.js, Node.js, React Native, React.js, Spring, Spring Boot and Vue.js. [Yes](https://fluidattacks.com/product/sast/). We support all frameworks supported in the Essential plan, as well as the following: Apache Struts, Ember.js, Gatsby, Meteor, Phoenix, Ruby Sinatra, Ruby on Rails, Svelte, Symfony, Tornado, among others. [Yes](https://www.guardrails.io/sast/). They support the following [frameworks](https://docs.guardrails.io/docs/scanning-techniques/code/introduction): .NET, [Ruby on Rails](https://www.guardrails.io/languages/ruby-code-security/), among others. **DAST** [Yes](https://fluidattacks.com/product/dast/). We scan unauthenticated HTTP endpoints, including headers, DNS records, HTML content, and SSL connections for encryption suites, protocols, and X509 certificates. [Yes](https://fluidattacks.com/product/dast/). Its capability is equal to that of the Essential plan. [Yes](https://www.guardrails.io/dast/). Their solution is in [beta version](https://www.guardrails.io/pricing/) and scans [authenticated](https://docs.guardrails.io/docs/scanning-techniques/runtime/job-file/specification) and [unauthenticated](https://docs.guardrails.io/docs/scanning-techniques/runtime/job-file/specification) [HTTP](https://docs.guardrails.io/docs/vulnerabilities/runtime/insecure_network_communication#cleartext-transmission) endpoints, including [headers](https://docs.guardrails.io/docs/vulnerabilities/java/insecure_configuration) and HTML content. They also cover [REST API](https://docs.guardrails.io/docs/scanning-techniques/runtime/job-file/), [SOAP API](https://docs.guardrails.io/docs/scanning-techniques/runtime/job-file/) and [GraphQL API](https://docs.guardrails.io/docs/scanning-techniques/runtime/job-file/). **IAST** No No No **SCA** [Yes](https://fluidattacks.com/product/sca/). We support the following [package managers](https://help.fluidattacks.com/portal/en/kb/articles/supported-package-managers-languages-and-files-in-sca): Cargo, Composer, Conan, Docker Images, GitHub Actions, Go, Gradle, Hex, Maven, NPM, NuGet, pNPM, pip, Poetry, Pub, RubyGems, SBT, SwiftPM and Yarn. [Yes](https://fluidattacks.com/product/sca/). Its capability is equal to that of the Essential plan. [Yes](https://www.guardrails.io/sca/). They support the following [package managers](https://docs.guardrails.io/docs/scanning-techniques/dependencies/introduction): Cargo, CocoaPods, Conan, Composer, dpkg, Go, Gradle, Maven, NuGet, npm, pip, Pub, RedHat RPM, RubyGems, SwiftPM and Yarn. **PTaaS** No [Yes](https://fluidattacks.com/product/ptaas/) No **Reverse engineering** No [Yes](https://fluidattacks.com/product/re/) No **Secure code review** No [ ](https://fluidattacks.com/solutions/secure-code-review/)[Yes](https://fluidattacks.com/solutions/secure-code-review/) No **CSPM** [ ](https://fluidattacks.com/product/cspm/)[Yes](https://fluidattacks.com/product/cspm/) [ ](https://fluidattacks.com/product/cspm/)[Yes](https://fluidattacks.com/product/cspm/) No **ASPM** [ ](https://fluidattacks.com/product/aspm/)[Yes](https://fluidattacks.com/product/aspm/) [ ](https://fluidattacks.com/product/aspm/)[Yes](https://fluidattacks.com/product/aspm/) No **SCM integrations** [Azure DevOps](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization), [Bitbucket](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization), [GitHub](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization) and [GitLab](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization) It offers the [same integrations](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization) as the Essential plan. [Azure DevOps](https://docs.guardrails.io/docs/getting-started#azure-devops), [GitHub](https://docs.guardrails.io/docs/getting-started#github), [GitLab](https://docs.guardrails.io/docs/getting-started#gitlab) and [Bitbucket](https://docs.guardrails.io/docs/getting-started#bitbucket) **Ticketing integrations** [Azure DevOps work items](https://help.fluidattacks.com/portal/en/kb/articles/set-up-the-azure-devops-integration), [GitLab issues](https://help.fluidattacks.com/portal/en/kb/articles/set-up-the-gitlab-integration) and [Jira](https://help.fluidattacks.com/portal/en/kb/articles/set-up-the-jira-integration) It offers the [same integrations](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks) as the Essential plan. [Jira](https://docs.guardrails.io/docs/tutorials/integrate_jira) **ChatOps integrations** No No [Slack](https://docs.guardrails.io/docs/tutorials/integrate_slack) **IDE integrations** [VS Code](https://help.fluidattacks.com/portal/en/kb/articles/install-the-vs-code-extension) It offers the [same integration](https://help.fluidattacks.com/portal/en/kb/articles/install-the-vs-code-extension) as the Essential plan. No **CI/CD integrations** AWS CodePipeline, Bamboo, CircleCI, GitHub Actions, GitLab CI, Jenkins, TeamCity, Travis CI, and any other [CI/CD system that supports Docker](https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd#Run_the_Fluid_Attacks_scanner_on_your_CI_CD_provider) It offers the [same integrations](https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd#Run_the_Fluid_Attacks_scanner_on_your_CI_CD_provider) as the Essential plan. [AzureDevOps pipelines](https://www.guardrails.io/azure-devops-code-security/), [Bitbucket pipelines](https://www.guardrails.io/bitbucket-code-security/), [GitHub Actions](https://www.guardrails.io/github-code-security/) and [GitLab CI](https://www.guardrails.io/gitlab-code-security/) **Cloud Integrations** [AWS, Azure and GCP](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-cloud-integrations) It offers the [same integrations](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-cloud-integrations) as the Essential plan. No **Compliance integrations** No No No **SCA integrations** [Native scanner](https://fluidattacks.com/product/sca/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/sca/) to that of the Essential plan. [Native scanner](https://www.guardrails.io/sca/) (included, no integration needed) **SAST integrations** [Native scanner](https://fluidattacks.com/product/sast/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/sast/) to that of the Essential plan. [Native scanner](https://www.guardrails.io/sast/) (included, no integration needed) **DAST integrations** [Native scanner](https://fluidattacks.com/product/dast/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/dast/) to that of the Essential plan. [Native scanner](https://www.guardrails.io/dast/) (included, no integration needed) **IAST integrations** No No No **Secrets integrations** [Native scanner](https://fluidattacks.com/product/sast/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/sast/) to that of the Essential plan. [Native scanner](https://www.guardrails.io/secrets/) (included, no integration needed) **Container integrations** [Native scanner](https://fluidattacks.com/systems/containers/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/systems/containers/) to that of the Essential plan. No **CSPM integrations** [Native scanner](https://fluidattacks.com/product/cspm/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/cspm/) to that of the Essential plan. No **Compliance** We validate some [requirements](https://db.fluidattacks.com/req/) based on these [standards and guidelines](https://db.fluidattacks.com/std/): Agile Alliance, BSIMM, BIZEC-APP, BSAFSS, CAPEC™, CASA, C2M2, CCPA, CERT-C, CERT-J, CIS, CMMC, CPRA, CWE™, CWE TOP 25, ePrivacy Directive, FACTA, FCRA, FedRAMP, FERPA, FISMA, GDPR, GLBA, HIPAA, HITRUST CSF, ISA/IEC 62443, ISO/IEC 27001, ISO/IEC 27002, ISSAF, LGPD, MITRE ATT&CK®, MISRA-C, MVSP, NERC CIP, NIST 800-53, NIST 800-63B, NIST 800-115, NIST 800-171, NIST CSF, NIST SSDF, NYDFS, NY SHIELD Act, OSSTMM3, OWASP API Security Top 10, OWASP ASVS, OWASP MASVS, OWASP-M TOP 10, OWASP SAMM, OWASP SCP, OWASP Top 10 Privacy Risks, OWASP TOP 10, PA-DSS, PCI DSS, PDPA, PDPO, POPIA, PTES, Resolution SB 2021 2126, SANS 25, SIG Core, SIG Lite, SOC2®, SWIFT CSCF, WASC and WASSEC. We validate all the [requirements](https://db.fluidattacks.com/req/) according to the same [standards and guidelines](https://db.fluidattacks.com/std/) as the Essential plan. They validate requirements based on these standards and guidelines : [CWE](https://www.guardrails.io/blog/looking-back-at-the-2022-cwe-top-25-most-dangerous-software-weaknesses/), [CWE TOP 25](https://www.guardrails.io/blog/looking-back-at-the-2022-cwe-top-25-most-dangerous-software-weaknesses/), [GDPR](https://www.guardrails.io/guardrails-vs-snyk/), [HIPAA](https://www.guardrails.io/guardrails-vs-snyk/), [ISO/IEC 27001](https://www.guardrails.io/blog/building-a-stronger-security-foundation-secure-coding-and-iso-2700127002/), [ISO/IEC 27002](https://www.guardrails.io/blog/building-a-stronger-security-foundation-secure-coding-and-iso-2700127002/), [NIST 800-53](https://www.guardrails.io/blog/achieving-compliance-with-application-security-regulations-a-cisos-guide/), [OWASP ASVS](https://www.guardrails.io/blog/what-is-the-difference-between-owasp-top-ten-and-asvs/), [OWASP TOP 10](https://www.guardrails.io/blog/what-is-owasp-top-10-and-how-does-it-help-me-secure-my-application/), [PCI DSS](https://www.guardrails.io/blog/what-is-pci-dss-and-best-practices-to-secure-your-software-while-being-compliant/), [SOC2](https://www.guardrails.io/industry/software-technology/) [®](https://www.guardrails.io/industry/software-technology/), among others. **Certifications or attestations** [SOC 2 Type II](https://trust.fluidattacks.tech/resources?s=xat56qr2ajdont2hyj85hf&name=soc-2-type-2-report-202407-pdf) and [SOC 3](https://trust.fluidattacks.tech/resources?s=fyik1uuqzj228tg31cpig&name=soc-3-report-202408-pdf) It is covered by the same [certifications and attestations](https://trust.fluidattacks.tech/) as the Essential plan. No **Marketplaces** [AWS](https://aws.amazon.com/marketplace/pp/prodview-hjaxsy2ne7yua?sr=0-1&ref_=beagle&applicationId=AWSMPContessa) It is available in the [same marketplace](https://aws.amazon.com/marketplace/pp/prodview-hjaxsy2ne7yua?sr=0-1&ref_=beagle&applicationId=AWSMPContessa) as the Essential plan. [AWS](https://aws.amazon.com/marketplace/pp/prodview-43pkeuwg7wufo?sr=0-5&ref_=beagle&applicationId=AWSMPContessa), [Azure](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/guardrailspteltd1660558122380.guardrails-saas-transactable?tab=Overview) and [GitHub](https://github.com/marketplace/guardrails) **Fast and automatic** [ Yes](https://help.fluidattacks.com/portal/en/kb/articles/configure-the-tests-by-the-standalone-scanner) [ Yes](https://help.fluidattacks.com/portal/en/kb/articles/configure-the-tests-by-the-standalone-scanner) [Yes](https://docs.guardrails.io/docs/category/scanning-techniques) **Remediation** We provide detailed [documentation](https://help.fluidattacks.com/portal/en/kb/find-security-vulnerabilities) on fixes and features both on our platform and in our [IDE extension](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-ide-extensions/vs-code-extension), which uses generative AI to offer [custom step-by-step correction guidance](https://help.fluidattacks.com/portal/en/kb/articles/get-ai-generated-guides-for-remediation). Additionally, our IDE extension leverages gen AI to offer [automated fixes](https://help.fluidattacks.com/portal/en/kb/articles/fix-code-automatically-with-gen-ai) capabilities. In addition to the Essential plan features, we offer the option of "[Talk to a hacker](https://help.fluidattacks.com/portal/en/kb/articles/talk-to-a-hacker)" in which our experts help clients understand how to remediate the most challenging vulnerabilities. They provide detailed [documentation](https://www.guardrails.io/) on fixes and features within their platform. **CI/CD security** We can integrate with [CI/CD systems](https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd) and trigger a build pipeline failure to prevent from deploying a noncompliant software version into production ([break the build](https://help.fluidattacks.com/portal/en/kb/articles/prevent-the-deployment-of-builds-with-vulnerabilities)). Its [capability is equal](https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd) to that of the Essential plan. They can integrate with [CI/CD systems](https://docs.guardrails.io/docs/getting-started) and trigger a build pipeline failure to prevent from deploying a noncompliant software version into production ([break the build](https://docs.guardrails.io/docs/build_status)). **Vulnerability detection method** [ ](https://fluidattacks.com/plans/#essential)[Automated tools](https://fluidattacks.com/plans/#essential) [Hybrid](https://fluidattacks.com/solutions/application-security) (automated tools + AI + human intelligence) [Automated tools](https://docs.guardrails.io/docs/category/scanning-techniques) **Vulnerability chaining** No By [combining vulnerabilities A and B](https://fluidattacks.com/product/mpt/), we discover a new, higher impact vulnerability C. No **Delivery of evidence** Our evidence is delivered in (a) [PDF executive reports](https://help.fluidattacks.com/portal/en/kb/articles/download-a-report-of-detected-vulnerabilities#Download_a_groups_vulnerability_report), (b) [XLSX technical reports](https://help.fluidattacks.com/portal/en/kb/articles/download-a-report-of-detected-vulnerabilities#Download_a_groups_vulnerability_report), (c) [code pieces](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#See_the_vulnerable_line_of_code) and (d) [graphs and metrics of the system's security status](https://help.fluidattacks.com/portal/en/kb/articles/common-analytics#Exposure_management_over_time). We deliver all the types of evidence mentioned in the Essential plan, and additionally, (a) [video recordings of the attack](https://help.fluidattacks.com/portal/en/kb/articles/examine-the-evidence-of-exploitability) and (b) [screenshots with explanatory annotations](https://help.fluidattacks.com/portal/en/kb/articles/examine-the-evidence-of-exploitability). Their evidence is presented through [graphs and metrics](https://docs.guardrails.io/docs/getting-started#dashboard), and there is no information available on the formats for exporting this evidence. **Exploitation** No We can do [exploitation](https://fluidattacks.com/products/ptaas) as long as the client provides an available environment. No **Zero-day vulnerabilities** No Our security researchers search for [zero-day vulnerabilities](https://fluidattacks.com/solutions/vulnerability-management/) in open-source software. No **AI/ML triage** No Using artificial intelligence (AI), we [prioritize](https://help.fluidattacks.com/portal/en/kb/articles/introduction-to-fluid-attacks-ai-tool) potentially vulnerable files for assessment. Our AI is specially trained by machine learning (ML) with thousands of snippets of vulnerable code. No **Deployment** [SaaS](https://fluidattacks.com/platform/) Same as the [Essential plan](https://fluidattacks.com/platform/). [SaaS](https://www.guardrails.io/) and [on-premises](https://docs.guardrails.io/docs/deployments/deployment-requirements-kots) **Open source** [Yes](https://help.fluidattacks.com/portal/en/kb/articles/open-source). [MPL-2.0 license](https://gitlab.com/fluidattacks/universe/-/blob/trunk/LICENSE?ref_type=heads). Totally equivalent to the [paid version](https://fluidattacks.com/plans/). [Yes](https://help.fluidattacks.com/portal/en/kb/articles/open-source). [MPL-2.0 license](https://gitlab.com/fluidattacks/universe/-/blob/trunk/LICENSE?ref_type=heads). Partially equivalent to the [paid version](https://fluidattacks.com/plans/). No **Year founded** [2001](https://fluidattacks.com/about-us/) Same founding year as the [Essential plan](https://fluidattacks.com/about-us/). [2017](https://www.linkedin.com/company/guardrails/about/) **Number of employees** [139](https://www.linkedin.com/company/fluidattacks/insights/) Same number of employees as the [Essential plan](https://www.linkedin.com/company/fluidattacks/insights/). [16](https://www.linkedin.com/company/guardrails/about/) **Other services** Focus on [automated offensive testing](https://fluidattacks.com/) for applications in development. Focus on both [automated and manual offensive testing](https://fluidattacks.com/) for applications in development. Focus on [automated offensive testing](https://www.guardrails.io/) for applications in development. **Reputation sites (On a scale of 1 to 10)** Between 9.16 and 10.00 based on 31 reviews over 6.3 years from the following 3 sources: [Clutch](https://clutch.co/profile/fluid-attacks#highlights), [Gartner Peer Insights](https://www.gartner.com/reviews/market/application-security-testing/vendor/fluid-attacks/product/continuous-hacking) and [PeerSpot](https://www.peerspot.com/products/fluid-attacks-reviews). Same reviews and ratings as the Essential plan. Between 8.88 and 9.72 based on 34 reviews over 3.9 years from the following 4 sources: [G2](https://www.g2.com/products/guardrails-guardrails/reviews), [PeerSpot](https://www.peerspot.com/products/guardrails-reviews), [Software Advice](https://www.softwareadvice.com/vulnerability-scanner/guardrails-profile/) and [TrustRadius](https://www.trustradius.com/products/guardrails/reviews). **Status page** [Yes](https://status.fluidattacks.tech/) [Yes](https://status.fluidattacks.tech/) [Yes](https://guardrailsio.statuspage.io/) **Demo** [ ](https://fluidattacks.com/contact-us/)[Yes](https://fluidattacks.com/contact-us/) [ ](https://fluidattacks.com/contact-us/)[Yes](https://fluidattacks.com/contact-us/) [Yes](https://www.guardrails.io/book-a-demo/) **Free trial** [ ](https://app.fluidattacks.com/SignUp)[Yes](https://app.fluidattacks.com/SignUp) [PoV](https://help.fluidattacks.com/portal/en/kb/articles/continuous-hacking-pov#Scope) [Yes](https://www.guardrails.io/book-a-demo/)

> [!TIP] > > **References were last checked on Sep 18, 2024.** > [!TIP] > > **Free trial** > Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your [21-day free trial](https://app.fluidattacks.com/SignUp) and discover the benefits of the [Continuous Hacking](https://fluidattacks.com/services/continuous-hacking/) [Essential plan](https://fluidattacks.com/plans/). If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out [this contact form](https://fluidattacks.com/contact-us/).