Curated
HackerOne
Platform for bug bounties and vulnerability disclosure programs
Pentest and BountyBug bounty platform
Alternatives to Burp Suite
12 tools like Burp Suite, chosen by what they do. About Burp Suite
Curated
Bugcrowd
Crowdsourced bug bounty and penetration testing platform
Pentest and BountyCrowdsourced security testing
Open source
Nmap
Free, open source network scanner for hosts, ports and services
Pentest and BountyNetwork discovery scanner
Open source
Zed Attack Proxy (ZAP)
Free open source scanner for finding security flaws in web apps
Web SecurityFree web app scanner
Free
Web Security Academy
Free online web security training with interactive labs
Security LearningFree web security training
Freemium
Aikido
Security platform for code, dependencies, cloud and pentests
Code SecurityAll in one security for devs
Curated
StackHawk
Security testing for running apps, with fixes from coding agents
Web ScanningDeveloper first DAST
Freemium
Open source
Nuclei
Open source scanner that runs vulnerability checks from templates
Web ScanningTemplate based vuln scanner
Open source
Grype
Open source CLI that finds known vulnerabilities in container images
Cloud SecurityFast vulnerability scanner
Curated
Checkmarx
Enterprise platform that scans code for security flaws and risks
Code SecurityEnterprise code security
Open source
Semgrep
Scans source code and dependencies for security issues
Code SecurityFast code security scanning