Fluid Attacks

What Fluid Attacks is

Fluid Attacks is an application security platform for finding, reporting, managing, and fixing vulnerabilities across the software development lifecycle. Its Essential plan provides continuous automated SAST, SCA, DAST, MAST, CSPM, and secret scanning. Advanced includes all Essential capabilities and adds expert penetration testing as a service, secure code review, and reverse engineering. Teams can prioritize findings with customizable risk scoring, accept risks temporarily or permanently, and set thresholds that break builds. GenAI-assisted Autofix and Custom Fix support remediation in the platform and IDE extensions. Listed connections include Jira Cloud, GitLab, Azure DevOps, IDE extensions, CI Gate, a platform API, and webhooks. Extensions or plugins are listed for Visual Studio Code, Cursor, and IntelliJ IDEA. The API is a GraphQL service with one endpoint for queries and mutations. Fluid Attacks lists source-code analysis across 14 languages, pull-request scans, CI/CD integration, IDE support, and automated fixes. Support options include live chat during support hours, on-demand demos, and Talk to a Pentester guidance. Pricing is provided through sales rather than a published amount. There is no free plan, but an Essential trial lasts 21 days and has account requirements.

Who it suits

Fluid Attacks suits security, development, and fraud teams that need vulnerability visibility and remediation across their software lifecycle. It is also aimed at organizations wanting automated analysis, expert testing, IDE workflows, and CI/CD controls.

Limits

There is no free plan. The Essential plan requires a minimum of 10 authors billed monthly, and its 21-day trial requires a Git repository plus a corporate Google, Azure, or Bitbucket account; existing client organizations cannot create trial accounts.

Getting started

1. Open https://fluidattacks.com/
2. Request pricing or start the 21-day Essential trial
3. Provide a Git repository and a corporate Google, Azure, or Bitbucket account for the trial
4. Connect listed repositories, CI/CD tools, IDEs, or webhooks
5. Configure risk scoring, acceptance rules, and build-breaking thresholds
6. Review findings and apply Autofix or Custom Fix

Verdict

Choose Fluid Attacks when your organization needs combined automated application testing, expert services, risk controls, and remediation workflows. Look elsewhere if you need a free tier, published pricing, or a trial without corporate identity and repository requirements.