CIS-CAT Pro Assessor vs LevelBlue AppDetectivePRO
CIS-CAT Pro Assessor
cisecurity.org
LevelBlue AppDetectivePRO
levelblue.comSide by side
| Figure | CIS-CAT Pro Assessor | LevelBlue AppDetectivePRO |
|---|---|---|
| Price from | $200/mo | — |
| Free plan | Yes | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | — | Yes |
| Windows | Yes | Yes |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 12 | 3 |
| Spec score · Database Vulnerability Scanners | 9.4 (#1) | 8.3 (#5) |
| Company headquarters | CIS lists its headquarters in East Greenbush, New York. | LinkedIn lists Chicago, Illinois as Trustwave's headquarters and gives 70 W Madison St, Suite 600, Chicago, Illinois 60602 as the primary location. |
| Company size | LinkedIn lists CIS in the 501–1,000 employee range. | LinkedIn displays 633 employees for Trustwave, a LevelBlue company, and describes the company as founded in 1995. |
| Founded | 2000 | 2024 |
| Headquarters | East Greenbush, New York, United States | Plano, Texas, United States |
| Praise: usability | A Reddit user reported that the tool was easy to use and produced strong benchmark reports with step-by-step compliance instructions. | The iTnews reviewer praised straightforward installation, a logical dashboard and broad support. |
| Purpose | CIS-CAT Pro Assessor scans systems and reports their compliance with CIS Benchmarks. | AppDetectivePRO scans databases and big data stores for configuration mistakes, access control issues, missing patches, and risky settings that could lead to compromise. |
| Remediation guidance | Conformance reports include written remediation guidance for supported Benchmark recommendations. | Each knowledgebase check can provide remediation guidance and the product can generate a Fix Scripts report containing possible SQL statements. |
| Support | CIS SecureSuite membership includes technical product support, and the product page says dedicated Member Success Managers and enhanced technical support are available. | The iTnews review reported phone support from 9 a.m. to 9 p.m. EST, password-protected web support and fast email responses, with extra support available for a fee. |
| System requirements | The installation guide lists a multicore processor, at least 2 GB RAM, 5 GB free disk space and administrator privileges for local assessments. | The published requirements specify a 64-bit Windows host, dual-core 1.60 GHz processor, at least 3 GB RAM, 400 MB installation space and at least 5 GB for scan data. |
| What it does | CIS-CAT Pro Assessor scans local and remote systems against CIS Benchmark configuration recommendations and reports compliance. | AppDetectivePRO scans databases and big-data stores for vulnerabilities, configuration errors, access-control problems, missing patches and risky combinations of settings. |
Plans
CIS-CAT Pro Assessor
- CIS-CAT LiteFree
- CIS SecureSuite End User Membership (up to 99 employees)$2,400 a year
- CIS SecureSuite End User (up to 99 employees)$2,400 a year
- CIS SecureSuite Controls Membership$3,600 a year
- CIS SecureSuite End User (100–499 employees)$5,500 a year
- CIS SecureSuite End User Membership (100–499 employees)$5,500 a year
- CIS SecureSuite End User (500–999 employees)$7,900 a year
- CIS SecureSuite End User Membership (500–999 employees)$7,900 a year
- CIS SecureSuite End User Membership (1,000–4,999 employees)$10,900 a year
- CIS SecureSuite End User Membership (5,000–24,999 employees)$12,800 a year
LevelBlue AppDetectivePRO
- AppDetectivePRO 30-Day TrialFree
- Complimentary single-license trialFree
- AppDetectivePro offering (iTnews review)Priced on request
In their own words
CIS-CAT Pro Assessor
CIS-CAT Pro Assessor has no write-up on Specifiction yet; its figures are above.
LevelBlue AppDetectivePRO
LevelBlue AppDetectivePRO scans databases and big data stores for configuration errors, access-control issues, missing patches, and risky settings that could lead to compromise. It assesses databases on premises or in the cloud and supports discovery, assessment, and reporting on security, risk, or compliance posture. LevelBlue says the product has more than 50 built-in policies and 12 annual knowledge-base updates. SpiderLabs experts contribute vulnerability research to that knowledge base, and policies can be customized. Supported datastore examples include Amazon RDS, Azure SQL, Microsoft SQL Server, MySQL, PostgreSQL, MongoDB, Cassandra, Couchbase, Elasticsearch, and Teradata. Licensing depends on the number and type of databases, with a licensed unit defined for each platform; pricing is available on request. A 30-day trial is offered. The trial license excludes some filtering or customization features, and technical support is unavailable during the trial. An evaluation without an evaluation license is limited to one scanned asset and one built-in policy, then stops running 30 days after first opening.