--- description: "Comparison between solutions of Fluid Attacks and White Jaguars." keywords: "Fluid Attacks, Continuous Hacking, White Jaguars, application security, vulnerability scanning, PTaaS, ASOC, tools, support, automated" other: private: false title: White Jaguars --- # White Jaguars import { Table } from "nextra/components"; **How does Fluid Attacks' solution compare to White Jaguars's?** The following comparison table enables you to discern the performance of both providers across various attributes essential for meeting your company’s cybersecurity needs. To better understand each attribute, [read their descriptions in the dedicated page](https://help.fluidattacks.com/portal/en/kb/articles/comparison-categories-description). **Criteria** **Fluid Attacks Essential** **Fluid Attacks Advanced** **White Jaguars** **Accuracy** Our SAST tool achieved the best possible result against the OWASP Benchmark: a TPR (True Positive Rate) of 100% and an FPR [(False Positive Rate) of 0%](https://fluidattacks.com/blog/owasp-benchmark-fluid-attacks/). We identify 90% of the evaluated systems' risk exposure. (Accuracy is calculated with the F1 score. Risk exposure is calculated with the formula [CVSSF=4^(CVSS-4)](https://help.fluidattacks.com/portal/en/kb/articles/accuracy-sla)). They do not show information regarding false positive or false negative rates. **Binary SAST** Yes. We support APK files. Yes. Its capability is equal to that of the Essential plan. No **Languages (Source SAST)** [Yes](https://fluidattacks.com/product/sast/). We support the following [languages and technologies](https://help.fluidattacks.com/portal/en/kb/articles/supported-languages): Android, C#, CloudFormation, Configuration files, Dart, Docker, Docker Compose, Go, HTML, HTML5, jBASE, Java, JavaScript, Kotlin, Kubernetes, PHP, Python, Razor, Shell Scripting, Storybook, Swift, Terraform, TypeScript and YAML. [Yes](https://fluidattacks.com/product/sast/). We support all languages and technologies supported in the Essential plan, as well as the following: ABAP, ActionScript, Apex, Assembler, ATS, Awk, C, C++, Clean, ClojureScript, Colm, cScript, Dale, Elvish, F#, Falcon, Fish, Fortran, Guile, Hana SQL Script, Haskell, Haxe, Idris, Ion, Janet, JCL, Joker, JScript, JSP, Lisp, Lobster, Natural, Nim, Objective C, Pascal, Perl, PL-SQL, PL1, PL/SQL, PowerScript, PowerShell, Prolog, R, RC, RPG4, Rust, Scala, SQL, SQR, Standard ML, T24, TAL, tcsh, Transact-SQL, VB.NET, VBA, VisualBasic 6, XML, among others. No **Frameworks (Source SAST)** [Yes](https://fluidattacks.com/product/sast/). We support the following [frameworks](https://help.fluidattacks.com/portal/en/kb/articles/supported-frameworks): .NET, .NET Core, Angular, ASP.NET, Bootstrap, Django, Express, FastAPI, Flask, Flutter, Ktor, Laravel, Nest, Next.js, Node.js, React Native, React.js, Spring, Spring Boot and Vue.js. [Yes](https://fluidattacks.com/product/sast/). We support all frameworks supported in the Essential plan, as well as the following: Apache Struts, Ember.js, Gatsby, Meteor, Phoenix, Ruby Sinatra, Ruby on Rails, Svelte, Symfony, Tornado, among others. No **DAST** [Yes](https://fluidattacks.com/product/dast/). We scan unauthenticated HTTP endpoints, including headers, DNS records, HTML content, and SSL connections for encryption suites, protocols, and X509 certificates. [Yes](https://fluidattacks.com/product/dast/). Its capability is equal to that of the Essential plan. No **IAST** No No No **SCA** [Yes](https://fluidattacks.com/product/sca/). We support the following [package managers](https://help.fluidattacks.com/portal/en/kb/articles/supported-package-managers-languages-and-files-in-sca): Cargo, Composer, Conan, Docker Images, GitHub Actions, Go, Gradle, Hex, Maven, NPM, NuGet, pNPM, pip, Poetry, Pub, RubyGems, SBT, SwiftPM and Yarn. [Yes](https://fluidattacks.com/product/sca/). Its capability is equal to that of the Essential plan. No **PTaaS** No [Yes](https://fluidattacks.com/product/ptaas/) [Yes](https://www.whitejaguars.com/en-us/). They offer one-shot MPT as add-on to their [product licenses](https://zirkul.com/). **Reverse engineering** No [Yes](https://fluidattacks.com/product/re/) No information available **Secure code review** No [ ](https://fluidattacks.com/solutions/secure-code-review/)[Yes](https://fluidattacks.com/solutions/secure-code-review/) No information available **CSPM** [ ](https://fluidattacks.com/product/cspm/)[Yes](https://fluidattacks.com/product/cspm/) [ ](https://fluidattacks.com/product/cspm/)[Yes](https://fluidattacks.com/product/cspm/) No **ASPM** [ ](https://fluidattacks.com/product/aspm/)[Yes](https://fluidattacks.com/product/aspm/) [ ](https://fluidattacks.com/product/aspm/)[Yes](https://fluidattacks.com/product/aspm/) No. They offer an [ASOC platform](https://www.zirkul.com/). **SCM integrations** [Azure DevOps](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization), [Bitbucket](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization), [GitHub](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization) and [GitLab](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization) It offers the [same integrations](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-to-test#Import_repositories_using_Open_Authorization) as the Essential plan. No **Ticketing integrations** [Azure DevOps work items](https://help.fluidattacks.com/portal/en/kb/articles/set-up-the-azure-devops-integration), [GitLab issues](https://help.fluidattacks.com/portal/en/kb/articles/set-up-the-gitlab-integration) and [Jira](https://help.fluidattacks.com/portal/en/kb/articles/set-up-the-jira-integration) It offers the [same integrations](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks) as the Essential plan. No **ChatOps integrations** No No No **IDE integrations** [VS Code](https://help.fluidattacks.com/portal/en/kb/articles/install-the-vs-code-extension) It offers the [same integration](https://help.fluidattacks.com/portal/en/kb/articles/install-the-vs-code-extension) as the Essential plan. No **CI/CD integrations** AWS CodePipeline, Bamboo, CircleCI, GitHub Actions, GitLab CI, Jenkins, TeamCity, Travis CI, and any other [CI/CD system that supports Docker](https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd#Run_the_Fluid_Attacks_scanner_on_your_CI_CD_provider) It offers the [same integrations](https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd#Run_the_Fluid_Attacks_scanner_on_your_CI_CD_provider) as the Essential plan. [Azure DevOps pipelines](https://docs.zirkul.com/devsecops/azure-devops-pipelines) and [Jenkins](https://docs.zirkul.com/devsecops/jenkins-pipelines) **Cloud Integrations** [AWS, Azure and GCP](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-cloud-integrations) It offers the [same integrations](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-cloud-integrations) as the Essential plan. No **Compliance integrations** No No No **SCA integrations** [Native scanner](https://fluidattacks.com/product/sca/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/sca/) to that of the Essential plan. [Dependency Check](https://zirkul.com/en/integrations), [Fortify](https://help.fluidattacks.com/portal/en/kb/articles/compare-with-fortify) and [HCL AppScan](https://help.fluidattacks.com/portal/en/kb/articles/compare-with-hcl-appscan) **SAST integrations** [Native scanner](https://fluidattacks.com/product/sast/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/sast/) to that of the Essential plan. [Fortify](https://help.fluidattacks.com/portal/en/kb/articles/compare-with-fortify), [HCL AppScan](https://help.fluidattacks.com/portal/en/kb/articles/compare-with-hcl-appscan) and [SonarQube](https://help.fluidattacks.com/portal/en/kb/articles/compare-with-sonarqube) **DAST integrations** [Native scanner](https://fluidattacks.com/product/dast/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/dast/) to that of the Essential plan. [Invicti](https://help.fluidattacks.com/portal/en/kb/articles/compare-with-invicti), [BurpSuite](https://zirkul.com/en/integrations), [Fortify](https://help.fluidattacks.com/portal/en/kb/articles/compare-with-fortify), [HCL AppScan](https://help.fluidattacks.com/portal/en/kb/articles/compare-with-hcl-appscan), [Netsparker](https://zirkul.com/en/integrations) and [ZAP](https://zirkul.com/en/integrations). **IAST integrations** No No [Fortify](https://help.fluidattacks.com/portal/en/kb/articles/compare-with-fortify) **Secrets integrations** [Native scanner](https://fluidattacks.com/product/sast/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/sast/) to that of the Essential plan. [SonarQube](https://help.fluidattacks.com/portal/en/kb/articles/compare-with-sonarqube) **Container integrations** [Native scanner](https://fluidattacks.com/systems/containers/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/systems/containers/) to that of the Essential plan. No **CSPM integrations** [Native scanner](https://fluidattacks.com/product/cspm/) (included, no integration needed) Its [capability is equal](https://fluidattacks.com/product/cspm/) to that of the Essential plan. No **Compliance** We validate some [requirements](https://db.fluidattacks.com/req/) based on these [standards and guidelines](https://db.fluidattacks.com/std/): Agile Alliance, BSIMM, BIZEC-APP, BSAFSS, CAPEC™, CASA, C2M2, CCPA, CERT-C, CERT-J, CIS, CMMC, CPRA, CWE™, CWE TOP 25, ePrivacy Directive, FACTA, FCRA, FedRAMP, FERPA, FISMA, GDPR, GLBA, HIPAA, HITRUST CSF, ISA/IEC 62443, ISO/IEC 27001, ISO/IEC 27002, ISSAF, LGPD, MITRE ATT&CK®, MISRA-C, MVSP, NERC CIP, NIST 800-53, NIST 800-63B, NIST 800-115, NIST 800-171, NIST CSF, NIST SSDF, NYDFS, NY SHIELD Act, OSSTMM3, OWASP API Security Top 10, OWASP ASVS, OWASP MASVS, OWASP-M TOP 10, OWASP SAMM, OWASP SCP, OWASP Top 10 Privacy Risks, OWASP TOP 10, PA-DSS, PCI DSS, PDPA, PDPO, POPIA, PTES, Resolution SB 2021 2126, SANS 25, SIG Core, SIG Lite, SOC2®, SWIFT CSCF, WASC and WASSEC. We validate all the [requirements](https://db.fluidattacks.com/req/) according to the same [standards and guidelines](https://db.fluidattacks.com/std/) as the Essential plan. They validate requirements based on these standards and guidelines : [COBIT](https://www.zirkul.com/es/), [CWE](https://www.whitejaguars.com/es/certificacion-aplicaciones-web-movil), [FISMA](https://www.whitejaguars.com/en-us/), [HIPAA](https://www.whitejaguars.com/es/ciberseguridad-healthtech), [HITRUST CSF](https://www.whitejaguars.com/es/ciberseguridad-healthtech), [ISO/IEC 27001](https://www.zirkul.com/es/), [MITRE ATT&CK](https://www.whitejaguars.com/es/certificacion-aplicaciones-web-movil), [NIST 800-115](https://www.whitejaguars.com/es/certificacion-aplicaciones-web-movil), [NIST-CSF](https://www.zirkul.com/es/), [OWASP MASVS](https://www.whitejaguars.com/es/certificacion-aplicaciones-web-movil), [OWASP WSTG](https://www.whitejaguars.com/es/certificacion-aplicaciones-web-movil), [OWASP MSTG](https://www.whitejaguars.com/es/certificacion-aplicaciones-web-movil), [OWASP ASVS](https://www.whitejaguars.com/es/certificacion-aplicaciones-web-movil), [OWASP Top 10](https://www.whitejaguars.com/es/certificacion-aplicaciones-web-movil), [PCI DSS](https://www.zirkul.com/es/), PTES, [SOC 2](https://www.whitejaguars.com/en-us/), among others. **Certifications or attestations** [SOC 2 Type II](https://trust.fluidattacks.tech/resources?s=xat56qr2ajdont2hyj85hf&name=soc-2-type-2-report-202407-pdf) and [SOC 3](https://trust.fluidattacks.tech/resources?s=fyik1uuqzj228tg31cpig&name=soc-3-report-202408-pdf) It is covered by the same [certifications and attestations](https://trust.fluidattacks.tech/) as the Essential plan. No **Marketplaces** [AWS](https://aws.amazon.com/marketplace/pp/prodview-hjaxsy2ne7yua?sr=0-1&ref_=beagle&applicationId=AWSMPContessa) It is available in the [same marketplace](https://aws.amazon.com/marketplace/pp/prodview-hjaxsy2ne7yua?sr=0-1&ref_=beagle&applicationId=AWSMPContessa) as the Essential plan. No **Fast and automatic** [ Yes](https://help.fluidattacks.com/portal/en/kb/articles/configure-the-tests-by-the-standalone-scanner) [ Yes](https://help.fluidattacks.com/portal/en/kb/articles/configure-the-tests-by-the-standalone-scanner) [Yes](https://zirkul.com/) **Remediation** We provide detailed [documentation](https://help.fluidattacks.com/portal/en/kb/find-security-vulnerabilities) on fixes and features both on our platform and in our [IDE extension](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-ide-extensions/vs-code-extension), which uses generative AI to offer [custom step-by-step correction guidance](https://help.fluidattacks.com/portal/en/kb/articles/get-ai-generated-guides-for-remediation). Additionally, our IDE extension leverages gen AI to offer [automated fixes](https://help.fluidattacks.com/portal/en/kb/articles/fix-code-automatically-with-gen-ai) capabilities. In addition to the Essential plan features, we offer the option of "[Talk to a hacker](https://help.fluidattacks.com/portal/en/kb/articles/talk-to-a-hacker)" in which our experts help clients understand how to remediate the most challenging vulnerabilities. They provide detailed [documentation](https://zirkul.com/) on fixes and features within their platform. **CI/CD security** We can integrate with [CI/CD systems](https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd) and trigger a build pipeline failure to prevent from deploying a noncompliant software version into production ([break the build](https://help.fluidattacks.com/portal/en/kb/articles/prevent-the-deployment-of-builds-with-vulnerabilities)). Its [capability is equal](https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd) to that of the Essential plan. They can integrate with [CI/CD systems](https://docs.zirkul.com/devsecops/running-jobs#webhook-calls) and trigger a build pipeline failure to prevent from deploying a noncompliant software version into production ([break the build](https://docs.zirkul.com/devsecops/creating-jobs)). **Vulnerability detection method** [ ](https://fluidattacks.com/plans/#essential)[Automated tools](https://fluidattacks.com/plans/#essential) [Hybrid](https://fluidattacks.com/solutions/application-security) (automated tools + AI + human intelligence) [Automated tools](https://zirkul.com/) (Through the integrations of their [ASOC platform](https://zirkul.com/)) + [human intelligence](https://www.whitejaguars.com/es/pruebas-manuales-penetracion-pentest) (as part of their [MPT offering](https://www.whitejaguars.com/en-us/)) **Vulnerability chaining** No By [combining vulnerabilities A and B](https://fluidattacks.com/product/mpt/), we discover a new, higher impact vulnerability C. No information available **Delivery of evidence** Our evidence is delivered in (a) [PDF executive reports](https://help.fluidattacks.com/portal/en/kb/articles/download-a-report-of-detected-vulnerabilities#Download_a_groups_vulnerability_report), (b) [XLSX technical reports](https://help.fluidattacks.com/portal/en/kb/articles/download-a-report-of-detected-vulnerabilities#Download_a_groups_vulnerability_report), (c) [code pieces](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#See_the_vulnerable_line_of_code) and (d) [graphs and metrics of the system's security status](https://help.fluidattacks.com/portal/en/kb/articles/common-analytics#Exposure_management_over_time). We deliver all the types of evidence mentioned in the Essential plan, and additionally, (a) [video recordings of the attack](https://help.fluidattacks.com/portal/en/kb/articles/examine-the-evidence-of-exploitability) and (b) [screenshots with explanatory annotations](https://help.fluidattacks.com/portal/en/kb/articles/examine-the-evidence-of-exploitability). Their evidence is delivered in (a) [PDF reports](https://www.whitejaguars.com/es/certificacion-aplicaciones-web-movil), (b) [CSV reports](https://www.whitejaguars.com/es/certificacion-aplicaciones-web-movil) (c) [XLSX format](https://docs.zirkul.com/) and (d) [graphs and metrics](https://zirkul.com/). **Exploitation** No We can do [exploitation](https://fluidattacks.com/products/ptaas) as long as the client provides an available environment. [Yes](https://www.whitejaguars.com/en-us/). They do exploitation as part of their [MPT offering](https://www.whitejaguars.com/en-us/). **Zero-day vulnerabilities** No Our security researchers search for [zero-day vulnerabilities](https://fluidattacks.com/solutions/vulnerability-management/) in open-source software. No **AI/ML triage** No Using artificial intelligence (AI), we [prioritize](https://help.fluidattacks.com/portal/en/kb/articles/introduction-to-fluid-attacks-ai-tool) potentially vulnerable files for assessment. Our AI is specially trained by machine learning (ML) with thousands of snippets of vulnerable code. No **Deployment** [SaaS](https://fluidattacks.com/platform/) Same as the [Essential plan](https://fluidattacks.com/platform/). [SaaS](https://www.zirkul.com/) **Open source** [Yes](https://help.fluidattacks.com/portal/en/kb/articles/open-source). [MPL-2.0 license](https://gitlab.com/fluidattacks/universe/-/blob/trunk/LICENSE?ref_type=heads). Totally equivalent to the [paid version](https://fluidattacks.com/plans/). [Yes](https://help.fluidattacks.com/portal/en/kb/articles/open-source). [MPL-2.0 license](https://gitlab.com/fluidattacks/universe/-/blob/trunk/LICENSE?ref_type=heads). Partially equivalent to the [paid version](https://fluidattacks.com/plans/). No **Year founded** [2001](https://fluidattacks.com/about-us/) Same founding year as the [Essential plan](https://fluidattacks.com/about-us/). [2016](https://www.whitejaguars.com/en-us/about-us) **Number of employees** [139](https://www.linkedin.com/company/fluidattacks/insights/) Same number of employees as the [Essential plan](https://www.linkedin.com/company/fluidattacks/insights/). [8](https://www.linkedin.com/company/whitejaguars/insights/) **Other services** Focus on [automated offensive testing](https://fluidattacks.com/) for applications in development. Focus on both [automated and manual offensive testing](https://fluidattacks.com/) for applications in development. [Integration of DevSecOps automation](https://www.whitejaguars.com/es/automatizacion-seguridad-devsecops), [targeted black box pentesting](https://www.whitejaguars.com/es/pruebas-manuales-penetracion-pentest), [red team operations](https://www.whitejaguars.com/es/red-team), and [secure certification for web and mobile applications](https://www.whitejaguars.com/es/certificacion-aplicaciones-web-movil). **Reputation sites (On a scale of 1 to 10)** Between 9.16 and 10.00 based on 31 reviews over 6.3 years from the following 3 sources: [Clutch](https://clutch.co/profile/fluid-attacks#highlights), [Gartner Peer Insights](https://www.gartner.com/reviews/market/application-security-testing/vendor/fluid-attacks/product/continuous-hacking) and [PeerSpot](https://www.peerspot.com/products/fluid-attacks-reviews). Same reviews and ratings as the Essential plan. No reviews **Status page** [Yes](https://status.fluidattacks.tech/) [Yes](https://status.fluidattacks.tech/) No **Demo** [ ](https://fluidattacks.com/contact-us/)[Yes](https://fluidattacks.com/contact-us/) [ ](https://fluidattacks.com/contact-us/)[Yes](https://fluidattacks.com/contact-us/) [Yes](https://www.whitejaguars.com/content/solicitar-informacion?utm_source=self&utm_medium=cta&utm_campaign=main_site) **Free trial** [ ](https://app.fluidattacks.com/SignUp)[Yes](https://app.fluidattacks.com/SignUp) [PoV](https://help.fluidattacks.com/portal/en/kb/articles/continuous-hacking-pov#Scope) No

> [!TIP] > > **References were last checked on Sep 12, 2024.** > [!TIP] > > **Free trial** > Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your [21-day free trial](https://app.fluidattacks.com/SignUp) and discover the benefits of the [Continuous Hacking](https://fluidattacks.com/services/continuous-hacking/) [Essential plan](https://fluidattacks.com/plans/). If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out [this contact form](https://fluidattacks.com/contact-us/).