Probely
Probely is a Lisbon-based application security company building an automated DAST scanner and API vulnerability platform for web apps, now operating as "Snyk API & Web" after its 2024 Snyk acquisition. It serves developers, security teams, and DevOps engineers through a freemium SaaS model with enterprise sales.
- Company typePrivate
- Founded2017
- HeadquartersLisboa, Portugal
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Probely does
Probely is a Lisbon-based application security company that builds an automated Dynamic Application Security Testing (DAST) scanner for web applications and APIs, now operating as "Snyk API & Web" following its November 2024 acquisition by Snyk Ltd. The platform combines a Headless-Chrome-based next-generation spider capable of crawling modern JavaScript apps and single-page applications with API security scanning that ingests OpenAPI/Swagger specifications and Postman Collections, and an asset discovery module that inventories external attack surfaces via integrations with AWS and Cloudflare. Its core differentiator is evidence-based reporting that safely exploits certain vulnerability classes to suppress false positives and produce actionable fix guidance, which the company positions as reducing friction between security and development teams.
The product is delivered as a cloud SaaS platform with a full-featured REST API, Python SDK, and an open-source on-premises agent (Farcaster) for scanning internal targets. Probely targets three primary personas — developers, security teams, and DevOps engineers — alongside compliance officers and vertical-specific buyers in healthcare, energy, media, and hospitality. It supports compliance reporting against PCI DSS, OWASP Top 10, ISO 27001, HIPAA, and GDPR, and integrates with Slack, Jira (Cloud and Server), Azure DevOps, DefectDojo, ServiceNow Application Vulnerability Response, Shortcut, Jenkins, and Circle CI. The go-to-market combines a freemium self-serve tier (5 free scan hours per month plus a 14-day fully-featured trial) with a separate enterprise sales motion offering unlimited scans, SSO, custom roles, dedicated account management, and managed scanning.
Revenue flows through two pricing tiers: a free-forever plan (limited usage-based scanning, up to 3 users) and a custom-priced enterprise plan sold on annual contracts via invoice or credit card. The company was venture-backed, raising approximately €7.7 million in a Series A led by TIIN Capital in November 2022 (with co-investors including Iberis Capital, Semapa Next, Portugal Ventures, Caixa Capital, EDP Ventures, Bright Pixel, and Shilling), supplemented by prior seed and pre-Series A rounds and a 2024 EIC Scaling Club commitment. Named customers include Houston Methodist, Trend Micro, Entertainment Partners, RTP, Introhive, EDP Ventures, OLX Group, and Pestana Hotel Group. The company maintains offices in Lisbon (HQ), London, and San Francisco, and its leadership team — CEO Nuno Loureiro, CISO João Poupino, and co-founders Cláudio Gamboa, Bruno Barão, and Tiago Mendo — came primarily from SAPO's web security group.
Probely firmographics
Firmographics- Name
- Probely
- Legal name
- Probely
- Website
- https://probely.com
- Company type
- Private
- Founded year
- 2017
- Operating status
- Acquired
- Headcount range
- 11–50 employees
- Short description
- Probely is a Lisbon-based application security company building an automated DAST scanner and API vulnerability platform for web apps, now operating as "Snyk API & Web" after its 2024 Snyk acquisition. It serves developers, security teams, and DevOps engineers through a freemium SaaS model with enterprise sales.
- Ownership category
- akta.pro rank
Probely industry classification
Industry- Product category
- Application Security Testing
- NAICS
- Testing Laboratories and Services (541380)
- SIC
- Services-Testing Laboratories (8734)
- akta.pro primary industry
- Application Security Testing (SAST/DAST/IAST/SCA) (HDADACAC)
- akta.pro secondary industry
- Vulnerability Assessment & Scanning (HDADAHAA)
Keywords
Where Probely is headquartered
LocationHeadquarters
- HQ city
- Lisboa
- HQ country
- Portugal
- HQ region
- Europe
Offices3 records
Markets served
Probely business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations
Revenue model
- SaaS Subscription - Free Tier: Free forever plan with core features and 5 free scan hours per month for single app scanning. Usage-based additional scanning.
- SaaS Subscription - Enterprise: Custom enterprise plan with unlimited scans, unlimited users, custom roles, SSO, compliance reports, and dedicated account manager. Billed annually via invoice or credit card.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free forever with core features and limited scanning |
| Subscription | Annual | Enterprise plan with unlimited scanning and full features |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels3 records
Probely product offering
Product offeringCore offering
Probely (now branded Snyk API & Web following acquisition by Snyk) sells an automated Dynamic Application Security Testing (DAST) platform that discovers web applications and APIs, scans them for vulnerabilities using a Headless-Chrome-based spider, and delivers evidence-based remediation reports. The product is sold as a SaaS subscription with a free tier and enterprise plan, targeting developers, security teams, and DevOps engineers in organizations needing to embed security testing into CI/CD pipelines.
Product overview
Probely is a unified platform offering an automated web application and API vulnerability scanner, now branded as Snyk API & Web following its acquisition by Snyk in November 2024. The core product integrates asset discovery capabilities, next-generation spider technology based on Headless-Chrome, DevSecOps-focused autonomous security testing, evidence-based reporting, and compliance support across major standards. The platform is offered through Free and Enterprise pricing tiers, with additional capabilities including a full-featured API, Jenkins/Circle CI plugins, and an on-premises agent for internal target scanning.
Differentiator
Problem solved
Functional benefit
Products and services
- Snyk API & Web (formerly Probely) An automated web application and API vulnerability scanner (DAST platform) that discovers APIs and web apps, scans for 100+ vulnerability types, and provides evidence-based reporting with detailed fix instructions. Uses a next-generation Headless-Chrome spider for crawling modern JavaScript apps and SPAs. Sold as a SaaS subscription to developers, security teams, and DevOps engineers in organizations.
Quantifiable outcome
- Scans for 100+ types of vulnerabilities totaling over 30,000 different vulnerabilities
- +2 more outcomes
Companies that use Probely
Customer profileNamed customers8 records
Segments5 records
Ideal customer profiles3 records
Probely technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration12 records
AI capability2 records
Feature6 records
Probely partnerships and signals
Strategic signalScale indicators3 records
Recent moves6 records
Expansion highlights6 records
Probely competitors and assessment
Company assessmentDirect peers
- PortSwigger Burp Suite: Widely used DAST and web vulnerability scanner (Burp Suite Enterprise), serving penetration testers and security teams with web app and API testing — comparable in core technology and target users.
- Detectify: External attack surface management and DAST platform serving security teams with continuous scanning — directly comparable in attack surface discovery and web app scanning.
- Invicti (Netsparker): Direct DAST competitor offering automated web application and API vulnerability scanning with proof-based verification, targeting enterprise security teams in the same segment as Probely.
- StackHawk: Developer-first DAST tool focused on CI/CD integration and API security testing, with a similar PLG + enterprise GTM motion to Probely.
- Rapid7 InsightAppSec: Enterprise DAST product from Rapid7 that scans modern web apps and APIs for vulnerabilities, comparable in buyer persona (security and DevOps teams) and deployment model to Probely.
Broad incumbents
- Snyk: Developer security platform that acquired Probely; now the parent company and a broad incumbent offering SCA, SAST, container, IaC, and DAST (via Probely) — direct overlap and the integration path for Probely's tech.
- Veracode: Established application security testing platform offering SAST, DAST, and SCA, with enterprise-focused GTM and overlapping DAST and API security capabilities.
- Tenable Web App Scanning: DAST product within Tenable's Nessus-based vulnerability management portfolio, offering automated web app scanning integrated with broader exposure management.
- Qualys Web Application Scanning: Cloud-based DAST module within Qualys' broader vulnerability management platform, targeting enterprise security buyers with overlapping web app and API scanning capabilities.
Emerging players
- OWASP ZAP: Open-source DAST tool widely used by developers and security teams; represents the free/commodity floor of the DAST market that Probely's freemium and paid tiers compete against.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Probely social profiles
Digital presenceProbely compliance and trust
Trust signalCompliance6 records
Probely financial estimates
Financial estimateRevenue estimate
Valuation estimate
Probely leadership team
Management profileNumber of profiles
Profiles1 record
Probely funding detail
Funding detailFunding overview
Funding rounds4 records
Investors11 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Probely M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Probely
What does Probely do?
Probely (now branded Snyk API & Web following acquisition by Snyk) sells an automated Dynamic Application Security Testing (DAST) platform that discovers web applications and APIs, scans them for vulnerabilities using a Headless-Chrome-based spider, and delivers evidence-based remediation reports. The product is sold as a SaaS subscription with a free tier and enterprise plan, targeting developers, security teams, and DevOps engineers in organizations needing to embed security testing into CI/CD pipelines.
Is Probely a public or private company?
Probely is a private company. It is classified as corporate owned and is currently acquired.
When was Probely founded?
Probely was founded in 2017. It employs 11 to 50 people.
Where is Probely based?
Probely is headquartered in Lisboa, Portugal, in the Europe region.
How does Probely make money?
Two revenue lines are on record. SaaS Subscription - Free Tier is the primary driver. The others are saaS Subscription - Enterprise.
Who are Probely's main competitors?
Direct peers on record are PortSwigger Burp Suite, Detectify, Invicti (Netsparker), StackHawk and Rapid7 InsightAppSec. Broad incumbents are Snyk, Veracode, Tenable Web App Scanning and Qualys Web Application Scanning. OWASP ZAP is listed as an emerging player.
Does Probely have an API?
Yes. Full-featured API enabling developers to fully operate the product programmatically, including setting subscope while starting a scan via API to speed up testing in CI/CD pipelines, setting webhooks via the API to be notified of Probely events, and building Python scripts to automate operational tasks and bulk actions. API scripting is available in Enterprise plan. Developer documentation is at developers.probely.com.
What industry is Probely in?
Probely's product category is Application Security Testing. Its primary akta.pro industry code is HDADACAC, Application Security Testing (SAST/DAST/IAST/SCA), with a secondary code of HDADAHAA, Vulnerability Assessment & Scanning. Its NAICS code is 541380 and its SIC code is 8734.