Vulnerability scanning for APIs and Apps

Building on a budget is always challenge, but losing customers or potential customers due to security issues is worse.

Do any of you use a SaaS vulnerability scanner to help catch those top layer gotchas that are hiding as features? I’m getting closer to launching a micro-SaaS and want, no, need to make sure I’m in good shape prior to launch. I don’t have thousands to burn on this, but can afford £50-£100 a month (certainly for a period of time anyway).

Would love to get anyone’s feedback! I’ve been looking at detectify.com and intruder.io. Years ago when I worked in ops, we had a corporate account with Trustwave which was useful.

Cheers builders!