Audience
Penetration testers, red teams, MSSPs and security consultants, DevSecOps and development teams, and students learning security.
About Insomnia
Insomnia is an autonomous AI pentesting and offensive security platform from CQR Cybersecurity. Point it at a target and its AI red team runs recon, vulnerability scanning, OSINT, CVE validation, exploitation and privilege escalation across web apps, APIs, networks, cloud and Active Directory, then writes a client-ready PDF, DOCX or HTML report with CVSS scoring and fixes.
It brings 275+ security modules into one tool: SAST and DAST, secret detection with live key validation, dependency and CVE scanning, API and GraphQL testing, wireless audit, Active Directory auditing with BloodHound, an HTTP interception proxy and a CI/CD pipeline builder. It also ships Insomnia OS, a Debian-based offensive OS.
There is a free Community Edition and a free SAST engine (pip, npm, Docker, Homebrew, plus VS Code and JetBrains plugins). Paid Advanced and Pro plans add full AI automation, the 30,000+ CVE database, exploitation tooling, OSINT and mobile analysis.
Other Popular Alternatives & Related Software
Invicti
Application security is noisy and overly complicated. The good news: you can relieve that unnecessary noise and dramatically reduce your risk of attacks with Invicti. Keeping up with security is more manageable with accurate, automated testing that scales as your needs shift and grow. That's where Invicti shines. With a leading dynamic application security testing solution (DAST), Invicti helps teams automate security tasks and save hundreds of hours each month by identifying the vulnerabilities that really matter. Combining dynamic with interactive testing (DAST + IAST) and software composition analysis (SCA), Invicti scans every corner of an app to find what other tools miss. With asset discovery, it's easier to discover all web assets — even ones that are lost, forgotten, or created by rogue departments. Through tried-and-true methods, Invicti helps DevSecOps teams get ahead of their workloads to hit critical deadlines, improve processes, and communicate more effectively.
Learn more about Invicti
NetSPI Attack Surface Management
Attack Surface Management detects known, unknown, and potentially vulnerable public-facing assets, as well as changes to your attack surface that may introduce risk. How? Through a combination of NetSPI’s powerful ASM technology platform, our global penetration testing experts, and our 20+ years of pen-testing expertise. Take comfort in the fact that the ASM platform is always on, working continuously in the background to provide you with the most comprehensive and up-to-date external attack surface visibility. Get proactive with your security using continuous testing. ASM is driven by our powerful automated scan orchestration technology, which has been utilized on the front lines of our pen-testing engagements for years. We use various automated and manual methods to continuously discover assets and leverage open source intelligence (OSINT) to identify publicly available data sources.
Learn more about NetSPI Attack Surface Management
Quixxi
Quixxi is a leading provider of mobile app security solutions that empowers enterprises and security professionals to protect their mobile applications through its patented and proprietary three-pillar platform:
SCAN, an automated vulnerability assessment tool (SAST/DAST/WebAPI) that integrates into the development pipeline to identify and fix vulnerabilities with full remediation guidance;
SHIELD, a one-click application shielding tool (RASP) that provides baseline security controls to protect intellectual property and defend against malicious third-party attacks; and
SUPERVISE, a runtime monitoring solution that enables remote disabling, messaging, security logs, and customer analytics for enhanced app management and visibility.
Serving: Mobile App Developers, Security Teams, and Organizations in Banking, Fintech, Digital Wallets, Healthcare, Government, and IT
Learn more about Quixxi
Pentera
Pentera (formerly Pcysys) is an automated security validation platform that helps you improve security so you can know where you stand at any given moment. It tests all cybersecurity layers by safely emulating attacks, arming you with a risk-based remediation roadmap. Pentera identifies true risk and security exposure so you can focus on the 5% of weaknesses that constitute 95% of the actual risk. Pentera is an agentless, low-touch, fully automated platform that requires no prior knowledge of the environment. The solution can see what no one else does, providing immediate discovery and exposure validation across a distributed network infrastructure. With Pentera, security teams can think and act as your adversary does, giving you the insights required for anticipating and preventing an attack before it happens. Hundreds of organizations trust Pentera‘s do-no-harm policy with no locked users, zero network downtime, and no data manipulation.
Learn more about Pentera
Pricing
Starting Price:
$149/month
Free Version:
Free Version available.
Company Information
CQR
United States
insom.ai
Videos and Screen Captures
Dashboard and live scanning across 275+ attack modules
Other Useful Business Software
$300 Free Credits to Build on Google Cloud
Put your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
Product Details
Platforms Supported
Cloud
Windows
Mac
Linux
On-Premises
Training
Documentation
Videos
Support
Online
Insomnia Frequently Asked Questions
Q: What kinds of users and organization types does Insomnia work with?
Insomnia works with these users and organization types: Mid Size Business, Small Business, Enterprise, Freelance, Nonprofit, Government, and Startup.
Q: What languages does Insomnia support in their product?
Insomnia supports these languages: English.
Q: What kind of support options does Insomnia offer?
Insomnia offers support via online.
Q: What other applications or services does Insomnia integrate with?
Insomnia integrates with: GitHub Actions, GitLab, and Jenkins.
Q: Does Insomnia have an API?
Yes, Insomnia has an API.
Q: What type of training does Insomnia provide?
Insomnia provides training in the form of documentation and videos.
Q: How much does Insomnia cost?
Pricing for Insomnia starts at $149/month.
