# Offensive360

> Offensive360 provides application security testing and risk management tools for development, security and compliance teams. The company is O360 B.V., based in the Netherlands.

Canonical website: https://offensive360.com/
Product pages are the source of truth for product capabilities and availability. This optional reference helps readers locate those pages; it does not replace them.

## Products

- [SAST — Static Application Security Testing](https://offensive360.com/products/sast/): Source code analysis, vulnerability findings, data-flow analysis and remediation guidance. Language and framework coverage should be verified against the application being evaluated.
- [DAST — Dynamic Application Security Testing](https://offensive360.com/products/dast/): Testing for running web applications and APIs, with crawl coverage and request/response evidence. Authentication and test coverage depend on the target and configuration.
- [MAST — Mobile Application Security Testing](https://offensive360.com/products/mast/): Analysis of Android and iOS application packages for mobile security weaknesses. Confirm supported package formats and analysis modes during evaluation.
- [ASM — Attack Surface Management](https://offensive360.com/products/asm/): External asset discovery, exposure observations and scheduled change monitoring. Coverage depends on available discovery and intelligence sources.
- [AI Pentester](https://offensive360.com/products/ai-pentester/): AI-assisted application testing within an authorized scope, with approval checkpoints and evidence review.
- [Autonomous Red Teaming](https://offensive360.com/products/autonomous-red-teaming/): Bounded autonomous application testing and attack-path investigation. Assess scope enforcement and stop controls in the intended environment.
- [GRC — Governance, Risk and Compliance](https://offensive360.com/products/grc/): Early-access platform for compliance programs, risk, policies, evidence, audits, incidents and vendor risk, with Arabic and English workflows.
- [Software Supply Chain Security](https://offensive360.com/software-supply-chain-security/): Dependency vulnerability analysis, malware indicators and open-source license risk.

## Evaluation and deployment

- [Platform overview](https://offensive360.com/platform/)
- [Cloud, on-premise and air-gapped deployment](https://offensive360.com/deployment/): Evaluate data residency, network requirements, product availability and offline operation. OVA and Azure VHD options are available; confirm the configuration in the proposal.
- [Application security evaluation guide](https://offensive360.com/guides/application-security-evaluation/): A practical test plan covering scope, safe controls, findings, remediation and deployment acceptance.
- [Pricing and product scope](https://offensive360.com/pricing/): Discuss an annual license and the products, deployment and support included in the proposal. Do not assume identical capabilities across deployments or that all products are included in every plan.
- [Integrations](https://offensive360.com/integrations/)
- [Book a demo](https://offensive360.com/demo/): Free 30-minute product walkthrough. Select your product interest and deployment requirements.
- [Trust and security](https://offensive360.com/security/)
- [Product updates](https://offensive360.com/changelog/)

## Regional and industry information

- [Government and defense](https://offensive360.com/solutions/government/)
- [Financial services](https://offensive360.com/solutions/financial-services/)
- [Healthcare](https://offensive360.com/solutions/healthcare/)
- [GRC for Saudi Arabia — English](https://offensive360.com/grc/saudi-arabia/)
- [GRC for Saudi Arabia — Arabic](https://offensive360.com/ar/grc/)

## Research and learning

- [Security blog](https://offensive360.com/blog/)
- [Vulnerability knowledge base](https://offensive360.com/knowledge-base/)
- [Security research and CVEs](https://offensive360.com/zerodays/)
- [Secure coding academy](https://offensive360.com/academy/)
- [AppSec glossary](https://offensive360.com/glossary/)
- [Product comparisons](https://offensive360.com/compare/)
- [Security headers checker](https://offensive360.com/tools/security-headers/)
- [RSS feed](https://offensive360.com/rss.xml)

## Company and independent profiles

- [About Offensive360](https://offensive360.com/about/)
- [Enterprise clients in healthcare, automotive manufacturing, armed forces, finance and government, alongside major consulting firms](https://offensive360.com/customers/)
- [G2 reviews](https://www.g2.com/products/offensive360/reviews): Consult the source for current ratings and review counts.
- [Gartner Peer Insights](https://www.gartner.com/reviews/market/application-security-testing/vendor/offensive-360/product/offensive-360)
- [GitHub organization](https://github.com/offensive360)
- [LinkedIn](https://www.linkedin.com/company/offensive360)

## Contact and reference files

- Sales and general enquiries: info@offensive360.com
- [Contact page](https://offensive360.com/contact/)
- [Extended product FAQs and updates](https://offensive360.com/llms-full.txt)
- [Sitemap](https://offensive360.com/sitemap-index.xml)
- [Vulnerability disclosure contact](https://offensive360.com/.well-known/security.txt)