TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    CAST Highlight

    Score9 out of 10
    Enterprise companies (1,001+ employees)
    CAST headquartered in New York offers Highlight, an application portfolio management solution providing software component analysis , application security, application benchmarking, and technical due diligence.

    $25,000

    per year

    Metasploit

    Score9 out of 10
    N/AMetasploit is open source network security software described by Rapid7 as the world’s most used penetration testing framework, designed to help security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness.N/A
    Pricing
    CAST HighlightMetasploit
    Editions & Modules
    Cloud
    25k
    Portfolio Size 25
    SCA
    $26k
    Portfolio Size 25
    Complete
    33k
    Portfolio Size 25
    No answers on this topic
    Offerings
    Pricing Offerings
    CAST HighlightMetasploit
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    YesNo
    Entry-level Setup FeeOptionalNo setup fee
    Additional DetailsAnnual Pricing by Size of Application Portfolio—
    More Pricing Information
    User Ratings
    CAST HighlightMetasploit
    Likelihood to Recommend
    10.0
    (1 ratings)
    10.0
    (5 ratings)
    Support Rating
    10.0
    (1 ratings)
    7.0
    (1 ratings)
    User Testimonials
    CAST HighlightMetasploit
    Likelihood to Recommend
    CAST
    I think CAST is a great tool to give insight into your applications. The tool can be met with resistance from team members as the tool is going to expose defects that should be addressed. Out of the box, it may need some tailoring to focus on certain areas so that you are not overwhelmed with defects the first time you scan your code. But ultimately, you will want to eliminate all defects in the code and have all violations turned on.
    Incentivized
    Read full review
    Rapid7
    It is easy to use with sufficient documentation on how to use the tools for end users or newbies. Experienced testers will find it easy to customise and configure the test cases. Just wished that I could have taken up a course on using this tool in my study days so that I could had explored more and improved my familiarity with the tool, unlike when working where access and time to explore the other features of the tool is limited
    Incentivized
    Read full review
    Pros
    CAST
    • Identifies common coding vulnerabilities.
    • Compares code to industry best practices.
    • Assesses the code for data privacy compliance.
    Incentivized
    Read full review
    Rapid7
    • Easy to use.
    • Many exploits available.
    • Multi-platform.
    Incentivized
    Read full review
    Cons
    CAST
    • Code scans could be faster. A large application may need to be broken down into smaller sub-applications in order to facilitate faster code scans.
    • We spent a lot of time trying to figure out how to best structure our code base in the application for ultimate performance.
    Incentivized
    Read full review
    Rapid7
    • More robust menus
    • Better plugin inter-operation
    Incentivized
    Read full review
    Support Rating
    CAST
    Tech support and pro services are top-notch.
    Incentivized
    Read full review
    Rapid7
    We don't use it.
    Incentivized
    Read full review
    Alternatives Considered
    CAST
    These other tools only do a part of what CAST does. CAST gives a comprehensive view into the code looking at all aspects, code quality, security, maintainability, vulnerability, privacy, reuse, etc. These other tools only focus on one or two dimensions.
    Incentivized
    Read full review
    Rapid7
    Metasploit is the most well-known tool in the average pen tester's toolkit. It's hard to compare to its neighbor's due to its size and following.
    Incentivized
    Read full review
    Return on Investment
    CAST
    • I believe once we had the tool working for our code base, we immediately saw positive ROI.
    • We spent some time getting to where our code code be scanned efficiently but some of that was trying to do things ourselves instead of fully utilizing Cast Professional Services. I highly recommend to do an engagement with CAST to have them help setup the tool in your environment or to run it in the cloud for you.
    Incentivized
    Read full review
    Rapid7
    • Positive: Improves efficiency of our network penetration testing operations.
    • Positive: Allows for collaboration and information sharing during a penetration test.
    Incentivized
    Read full review
    ScreenShots

    CAST Highlight Screenshots

    Screenshot of Application Portfolio ManagementScreenshot of Software Composition AnalysisScreenshot of Portfolio Advisor for Open SourceScreenshot of Portfolio Advisor for CloudScreenshot of Cloud Migration Blockers and Boosters