- Ease of use and setup
- Visibility into our environment
WAS gave us visibility into our externally exposed web applications and showed us vulnerabilities that we were not aware of and did not know how to test for. We didn't need any knowledge of these vulnerabilities or how they worked to scan for them and to gain the visibility.
The organization of the assets was a little confusing and overwhelming. The system could also use some work in pivoting from a VM scan to add the servers with web applications exposed to the WAS server. It frequently created WAS assets that did not have web applications.
I have been using it for 18 months.
Scalability would be tough because of how the endpoints are organized. We did not have any issues with deployment or stability.
We had a dedicated Technical Account Manager and the support was great.
We did not previously use a different solution.
Setup of WAS is pretty straightforward and only the organization of endpoints is a bit complex.
Implementation was very simple because we were only using the cloud product and did not have any on-prem scanners.
Being able to gain visibility into our environment created a great ROI and licensing for us was competitive, but would have made it tough to scale to our whole internal environment.