Aperio vs DoControl
Aperio
github.com
DoControl
docontrol.ioSide by side
| Figure | Aperio | DoControl |
|---|---|---|
| Price from | — | $4,166.67/mo |
| Free plan | — | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | — |
| Plans published | 0 | 4 |
| Spec score · SaaS Security Posture Management Software | 7.7 (#10) | 8.0 (#8) |
| Deployment | Aperio can be run with a self-hosted Compose deployment and requires PostgreSQL 15 or later for the documented local setup. | DoControl describes its solution as API-based and says it integrates with core SaaS ecosystems in a few minutes. |
| Founded | 2020 | 2020 |
| Purpose | Aperio is an open-source SaaS Detection & Response platform for detecting SaaS posture risks, inventorying OAuth shadow IT, and streaming findings to security systems. | DoControl provides visibility, threat detection, and remediation for sensitive data exposure and insider threats across SaaS ecosystems. |
| Remediation | The repository lists working remediation handlers for suspending Okta users, resetting Okta MFA, and revoking Slack OAuth apps; other handlers are described as stubbed and pluggable. | It supports on-demand bulk remediation, including removing user access from hundreds of thousands of files in minutes. |
Plans
DoControl
- Core Platform: Up to 500$50,000 a year
- Core Platform: 10K+Price not published
- Core Platform: 2,501-10KPrice not published
- Core Platform: 501-2,500Price not published
In their own words
Aperio
Aperio is an open-source SaaS Detection & Response platform for identifying SaaS posture risks, cataloging OAuth shadow IT, and sending findings to security systems. It connects to GitHub, Slack, Google Workspace, Okta, 1Password, Microsoft 365, and Atlassian Jira and Confluence. Listed detections include public GitHub repositories, Slack workspace 2FA enforcement, and multiple Google Workspace sharing, administration, Gmail, delegation, and OAuth risks. Okta, 1Password, Microsoft 365, and Atlassian are connection-only while their rule packs remain pending. Findings retain evidence, receive severity scores, support deduplication and risk exceptions, and can resolve automatically when a later sync no longer detects the signal. SIEM destinations include Splunk HEC, Panther, Panopticon, Elasticsearch, Datadog Logs, webhooks, and JSON Lines files, delivered through a retrying durable outbox. Working remediation handlers cover suspending Okta users, resetting Okta MFA, and revoking Slack OAuth apps. Human approval is required before provider-side writes, with two-person approval for response actions. Aperio is MIT licensed and supports self-hosted Compose deployment with PostgreSQL 15 or later.