Detectify, the application security platform built and trusted by ethical hackers, today announced that it has been positioned in the Major Player Category in the IDC MarketScape: Worldwide Dynamic Application Security Testing (DAST) 2026 Vendor Assessment (Doc #US54119126, September 2026). The IDC MarketScape evaluates suppliers across a comprehensive framework of quantitative and qualitative criteria, measuring short-term technical execution and long-term product strategy.
“Our approach focuses on payload-validated assessments, submitting crafted payloads and verifying an observable response, so teams know that a reported issue represents a real, exploitable risk.”
As DAST evolves from point-in-time scanning to continuous platforms like Detectify that integrate both application testing and attack surface management, the ability to validate findings through active exploitation, rather than generic version matching, has become a market differentiator for teams operating at scale.
“A core issue in modern AppSec is that security teams spend too much time chasing false positives generated by passive inference tools,” said Rickard Carlsson, CEO and co-founder of Detectify. “Our approach focuses on payload-validated assessments, submitting crafted payloads and verifying an observable response, so teams know that a reported issue represents a real, exploitable risk.”
Also Read: CIO Influence Interview with John Elliott, Cybersecurity Author Fellow at Pluralsight
Detectify believes this recognition reflects the platform’s focus on actionable vulnerability management and continuous testing for AppSec-led security functions. Key capabilities of Detectify include:
- Payload-based exploitation: Validating findings via active payloads and observable responses, eliminating the noise of generic version-matching tools.
- Automated surface scaling: Surface Monitoring deduplicates and promotes internet-facing assets to scannable status automatically, scaling seamlessly across portfolios with hundreds of thousands of domains.
- AI & Crowdsourced intelligence: Harnessing Alfred, Detectify’s AI research agent, along with an internal research team and a global community of ethical hackers, to rapidly convert threat intelligence and novel proofs-of-concept into runnable detection assessments.
Catch more CIO Insights: How Are CIOs Aligning Technology with Workforce Agility?
[To share your insights with us, please write to psen@itechseries.com ]

