What Escape is
Escape is doing amazing things with their approach to DAST. They thoroughly discover your APIs and schemas by searching your frontend code, and then test those APIs from the outside. They have great scanning support for modern languages, and also in depth testing configurations. The vendor site is escape.tech. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Escape covers
Escape is in the catalog for these capabilities. Categories: DAST, API Security, Agentic Development Security, and Pentest. Catalog tags: Hands-on, Best for MidMarket, Best for Enterprise, and Best for Startups.
How to evaluate Escape in a security program
Use Escape as a stack candidate, not as diligence evidence. The oneNorma score for Escape is 6.3/10 (percentile 89). If the real gap is in DAST, API Security, Agentic Development Security, and Pentest, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what escape.tech publishes. Contrast it with pentesting and Security Cloud & Compliance.
