Freedom251 › Web Application Security Scanners
Blacklock
What Blacklock is
Blacklock is a cloud-first Penetration Testing as a Service platform from Wellington, New Zealand. It combines automated vulnerability discovery, manual security testing, and vulnerability management. Scheduled or on-demand scans cover infrastructure, web applications, and REST APIs. CREST-certified consultants perform manual penetration tests and provide findings in real time or as tickets. Static code analysis supports more than 30 languages, while uploaded or scanned SBOMs can be analyzed and exported as PDF, SPDX, or CycloneDX. Reports include executive, developer, and full penetration test versions, plus a penetration test certificate. A browser extension captures authentication cookies for scanning login-protected areas. Integrations listed include GitHub, GitLab, Bitbucket, Azure DevOps, Jira, Vanta, Microsoft Entra ID, Okta, SSO/SAML, Zapier, and Salesforce. Blacklock offers a fully featured 14-day free trial; vulnerability scanning starts at $85 a month.
Who it suits
Blacklock suits organizations seeking scheduled or on-demand scanning, consultant-led penetration tests, code analysis, and SBOM review. Its API, web, and extension access can support teams connecting listed development, identity, and workflow services.
What it does well
- Scans infrastructure, web apps, and REST APIs
- Includes CREST-certified manual testing
- Analyzes code in over 30 languages
- Exports SBOM findings in multiple formats
- Offers a 14-day free trial
What to know first
- No free plan
- Manual testing price requires scoping
- Paid service starts at $85 a month
- Browser extension is needed for authenticated-area scans
Limits
The free trial lasts 14 days. Vulnerability Scanning starts at $85 a month with tiered pricing; manual penetration testing is priced according to application size and complexity during scoping.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Vulnerability Scanning | Starts at USD 85 per month; tiered pricing · Unlimited scheduled and on-demand scans · Agentic AI vulnerability validation and retesting · Blacklock API access | $85 a month |
| Manual Penetration Testing | Pricing depends on application size and complexity, assessed during scoping · CREST-certified manual testing · Three reports and a penetration test certificate | On request |
As blacklock.io lists them, read 4 Oct 2026. The maker's own page has the final word.
Getting started
- Open the Blacklock website
- Start the fully featured 14-day free trial or contact Blacklock
- Connect a supported integration or use the web interface
- Schedule or launch scans for infrastructure, applications, APIs, repositories, or SBOMs
- Install the Navigate & Scan browser extension for login-protected areas
- Choose Vulnerability Scanning or scope a Manual Penetration Testing engagement
Verdict
Blacklock combines automated scans, manual testing, code analysis, and SBOM reporting in one cloud platform. Review the scoped manual-testing price and starting monthly cost alongside the integrations and reporting you need.
Questions
How much does Blacklock cost?
Vulnerability Scanning starts at $85 a month with tiered pricing. Manual Penetration Testing is priced after assessing application size and complexity.
Is there a free trial?
Yes. Blacklock offers a fully featured 14-day free trial.
What can Blacklock scan?
It scans infrastructure, web applications, REST APIs, code repositories, and uploaded or scanned SBOMs.
Which integrations are listed?
Integrations include GitHub, GitLab, Bitbucket, Azure DevOps, Jira, Vanta, Microsoft Entra ID, Okta, SSO/SAML, Zapier, and Salesforce.
What reports come with penetration testing?
Penetration testing includes executive, developer, and full penetration test reports, plus a penetration test certificate.
Does Blacklock support authenticated scans?
Yes. The Navigate & Scan browser extension captures authentication cookies to scan login-protected areas.
Facts from Blacklock's own pages
- Browser extension
- The site describes a Navigate & Scan browser plugin for capturing authentication cookies to scan login-protected areas. · blacklock.io, 4 Oct 2026
- Headquarters
- Wellington, New Zealand · blacklock.io, 28 Sept 2026
- Integrations
- The site lists GitHub, GitLab, Bitbucket, Azure DevOps, Jira, Vanta, Microsoft Entra ID, Okta, SSO/SAML, Zapier, and Salesforce integrations. · blacklock.io, 4 Oct 2026
- Intended customers
- The company says its mission is to make consultant-grade penetration testing available to organizations of all sizes. · blacklock.io, 4 Oct 2026
- Penetration testing
- CREST-certified security consultants perform manual penetration tests and deliver findings in real time or as tickets. · blacklock.io, 4 Oct 2026
- Reporting
- Penetration testing includes executive, developer, and full penetration test reports, plus a penetration test certificate. · blacklock.io, 4 Oct 2026
- SBOM
- Blacklock analyzes uploaded or scanned SBOMs and exports findings as PDF, SPDX, or CycloneDX. · blacklock.io, 4 Oct 2026
- Scanning
- The platform provides scheduled and on-demand vulnerability scanning for infrastructure, web applications, and REST APIs. · blacklock.io, 4 Oct 2026
- Security and compliance
- Blacklock says sensitive data is encrypted in transit and at rest, and lists PCI, ISO 27001, SOC-2, HIPAA, and GDPR among the standards its services support. · blacklock.io, 4 Oct 2026
- Static code analysis
- Static code scanning supports more than 30 languages and can scan repositories on a schedule or on demand. · blacklock.io, 4 Oct 2026
- Support
- The site provides a contact email and says it will respond to an inquiry within 24 hours. · blacklock.io, 4 Oct 2026
- Trial
- Blacklock offers a fully featured 14-day free trial. · blacklock.io, 4 Oct 2026
- What it does
- Blacklock is a cloud-first Penetration Testing as a Service platform combining automated vulnerability discovery with manual security testing and vulnerability management. · blacklock.io, 4 Oct 2026