Reviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
36 reviews
from
External reviews are not included in the AWS star rating for the product.
Pynt: Shift-Left API Security
What do you like best about the product?
You don’t have to be a security engineer to get value from Pynt. If you already have an Open API spec or Postman collection, Pynt can auto-generate security tests for common vulnerabilities. This is huge for dev teams who don’t have dedicated AppSec people.
What do you dislike about the product?
Pynt works best when your API has a clean OpenAPI spec or well-defined Postman collections.
If your API is messy, undocumented, or highly dynamic (like GraphQL or multi-step workflows with complex state), Pynt’s auto-generated tests might miss important edge cases.
If your API is messy, undocumented, or highly dynamic (like GraphQL or multi-step workflows with complex state), Pynt’s auto-generated tests might miss important edge cases.
What problems is the product solving and how is that benefiting you?
Pynt codifies security best practices (OWASP API Top 10, fuzzing, auth tests, etc.) so you don’t need to be an expert to catch common vulnerabilities.
Performance and Usability Review of pynt G2
What do you like best about the product?
What stands out most about Pynt is its seamless integration with CI/CD pipelines, allowing automated API security scans without disrupting the development workflow. It intelligently maps out API structures, identifies vulnerabilities (like injection, misconfigurations, or authorization flaws), and provides developer-friendly remediation guidance, which makes fixing issues far more efficient.
The fact that it requires no extra scripting or complex configuration is a huge plus—it runs security tests automatically from OpenAPI specs, Postman collections, or traffic captures. The real-time insights and clear severity ratings make it easier to prioritize fixes.
Overall, Pynt strikes a solid balance between developer usability and strong security coverage, which is often hard to find in API security tools.
The fact that it requires no extra scripting or complex configuration is a huge plus—it runs security tests automatically from OpenAPI specs, Postman collections, or traffic captures. The real-time insights and clear severity ratings make it easier to prioritize fixes.
Overall, Pynt strikes a solid balance between developer usability and strong security coverage, which is often hard to find in API security tools.
What do you dislike about the product?
While Pynt is powerful and developer-friendly, one drawback is that its reporting and dashboard features can feel limited, especially when managing multiple APIs across large teams. It could benefit from more granular filtering, historical comparison, and export options to help track security posture over time.
Additionally, for more complex or custom API implementations, Pynt may miss certain business logic vulnerabilities that require deeper contextual understanding. In such cases, supplementing with manual testing or other tools becomes necessary.
Lastly, initial onboarding can feel a bit opaque for teams without OpenAPI specs or well-documented collections, which makes early setup slightly harder than expected.
Additionally, for more complex or custom API implementations, Pynt may miss certain business logic vulnerabilities that require deeper contextual understanding. In such cases, supplementing with manual testing or other tools becomes necessary.
Lastly, initial onboarding can feel a bit opaque for teams without OpenAPI specs or well-documented collections, which makes early setup slightly harder than expected.
What problems is the product solving and how is that benefiting you?
Pynt addresses one of the most critical and commonly overlooked areas in modern application development: API security. Traditionally, API security testing is manual, time-consuming, and often occurs too late in the development cycle. Pynt solves this by:
Automating API security tests during CI/CD, allowing us to catch vulnerabilities like broken access control, injection flaws, and misconfigurations early.
Eliminating the need for dedicated security expertise at every step, making security accessible to developers through intuitive tooling and actionable feedback.
Reducing time to remediate vulnerabilities, thanks to detailed, context-aware suggestions.
Enhancing compliance and risk mitigation by continuously scanning APIs against industry standards like OWASP API Top 10.
Automating API security tests during CI/CD, allowing us to catch vulnerabilities like broken access control, injection flaws, and misconfigurations early.
Eliminating the need for dedicated security expertise at every step, making security accessible to developers through intuitive tooling and actionable feedback.
Reducing time to remediate vulnerabilities, thanks to detailed, context-aware suggestions.
Enhancing compliance and risk mitigation by continuously scanning APIs against industry standards like OWASP API Top 10.
Pynt - Innovative API Security Testing
What do you like best about the product?
Uses live testing and automation data to build security baselines to discovery and map API usage.
What do you dislike about the product?
Process to setup the container and scanning process can be challenging. Required assistance from support.
What problems is the product solving and how is that benefiting you?
We had no visibility into the attack surfaces of our APIs. Now we have an automated way to validate the security controls and OWASP API top ten controls.
Pynt is the most effective API security testing tool I have found
What do you like best about the product?
What I appreciate most about Pynt is its seamless integration into existing CI/CD pipelines, allowing for automated and continuous API security testing without disrupting development workflows
What do you dislike about the product?
there is no proper reports very basic report in there
What problems is the product solving and how is that benefiting you?
They need to enhancement the reporting part
Ticks all the boxes for API security, with quick integration & results in minutes.
What do you like best about the product?
I especially like Pynt’s simple approach. Integration and onboarding was super quick and it seamlessly answers all the issues we were struggling with - fixing API vulnerabilities easily and automatically, as well as getting real and accurate results.
What do you dislike about the product?
Nothing, the app delivers everything you need seamlessly and efficiently.
What problems is the product solving and how is that benefiting you?
API security testing to track verified vulnerabilities, suggest fixes, SLDC
Effortless API security testing with Postman integration
What do you like best about the product?
The seamless integration with Postman and CI/CD pipelines is a game-changer. It makes API security testing super efficient, and the process feels natural if you're already using Postman. The reports are clear and actionable, which is a big plus.
What do you dislike about the product?
There's not much to dislike. Maybe a slight learning curve at first, but the tool’s simplicity and good documentation make up for it.
What problems is the product solving and how is that benefiting you?
Pynt automates API security testing and integrates with Postman and CI/CD, saving time and ensuring our APIs are secure before deployment.
This is a best API Security Testing tool and it easy to use
What do you like best about the product?
Pynt's API Security Testing stands out for its ability to seamlessly integrate into CI/CD pipelines, enabling automated, real-time identification of security vulnerabilities with minimal manual effort.
What do you dislike about the product?
The Report need to be more descriptive and need show how it passed and how it failed
What problems is the product solving and how is that benefiting you?
Pynt solves the problem of identifying API security vulnerabilities, such as broken authentication, data exposure, and misconfigurations, early in the development lifecycle.
Super useful API security testing with Pynt
What do you like best about the product?
Pynt is an useful security testing tooldesigned to help in API testing.Postman is my go to tool for API testing and Postman integrated with Pynt is useful to detect potential vulnerabilities.
As pynt is docker based, it needs very minimal set up and users can easily start using it.
In order to enhance your API security testing , I recommend Pynt as it helps to improve the robustness of your APIs
As pynt is docker based, it needs very minimal set up and users can easily start using it.
In order to enhance your API security testing , I recommend Pynt as it helps to improve the robustness of your APIs
What do you dislike about the product?
When I first set up Pynt, I encountered some difficulties, but I must say the Pynt team was incredibly responsive and helpful in resolving my queries quickly. Their Slack channel is a valuable resource and made the entire process much smoother.
What problems is the product solving and how is that benefiting you?
API security testing with Pynt addresses a range of challenges related to the security, functionality, and reliability of APIs.
It helps in below :
1) Detecting Vulnerabilities
2) Preventing Unauthorized Access
3) Securing Sensitive Data
4) Mitigating Misconfigurations
5)Addressing Business Logic Flaws
6) Reducing Downtime and Costs
7) Protecting Business Reputation
8) Ensuring Compliance with Regulations
It helps in below :
1) Detecting Vulnerabilities
2) Preventing Unauthorized Access
3) Securing Sensitive Data
4) Mitigating Misconfigurations
5)Addressing Business Logic Flaws
6) Reducing Downtime and Costs
7) Protecting Business Reputation
8) Ensuring Compliance with Regulations
First impression on Pynt
What do you like best about the product?
Being a functional tester, wanted to add security tests into Engineering testing. Pynt integration with Postman was smooth. Started to explore a new tool and the tool does most of the work. Able to see the reports from postman cli, it was helpful.
What do you dislike about the product?
Being a functional tester, used Pynt for learning purpose. As of now there is no downside.
What problems is the product solving and how is that benefiting you?
With minimum setup pain, I was able to integrate my existing automated functional tests. This saves lot of time.
Best API Security Tool
What do you like best about the product?
Pynt is a robust API security testing tool designed to enhance the security of APIs during the development and testing lifecycle, with great community support.
What do you dislike about the product?
Dislike is like Limited free plan and some time beginners might have setup issues
What problems is the product solving and how is that benefiting you?
API Security concerns like malicious or cybersecurity attacks, Time-Consuming Manual Testing Security and Compliance Concerns
showing 1 - 10