What FluidAttacks is
FluidAttacks offers a combined SAST, SCA, and DAST alongside service offerings for pentesting and code review. The vendor site is fluidattacks.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What FluidAttacks covers
FluidAttacks is in the catalog for these capabilities. Categories: ASPM, SCA, SAST, and DAST. Catalog tags: Best for Startups.
How to evaluate FluidAttacks in a security program
Use FluidAttacks as a stack candidate, not as diligence evidence. The oneNorma score for FluidAttacks is 4.8/10 (percentile 34). If the real gap is in ASPM, SCA, SAST, and DAST, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what fluidattacks.com publishes. Contrast it with pentesting and Security Cloud & Compliance.