Curated
HackerOne
Platform for bug bounties and vulnerability disclosure programs
Pentest and BountyBug bounty platform
Alternatives to Nmap
12 tools like Nmap, chosen by what they do. About Nmap
Curated
Bugcrowd
Crowdsourced bug bounty and penetration testing platform
Pentest and BountyCrowdsourced security testing
Freemium
Burp Suite
Web security testing toolkit for manual and automated scanning
Pentest and BountyWeb security testing toolkit
Open source
Nuclei
Open source scanner that runs vulnerability checks from templates
Web ScanningTemplate based vuln scanner
Open source
OSV-Scanner
Finds known vulnerabilities in your project's dependencies
Code SecurityGoogle open source scanner
Curated
Detectify
Cloud scanner for exposed assets, APIs and web applications
Web ScanningAttack surface scanner
Open source
Zed Attack Proxy (ZAP)
Free open source scanner for finding security flaws in web apps
Web SecurityFree web app scanner
Open source
Trivy
Open source scanner for vulnerabilities and misconfigurations
Code SecurityOpen vulnerability scanner
Paid
Sucuri
Website security service for malware cleanup and firewall
Network DefenseWebsite firewall and cleanup
Open source
Grype
Open source CLI that finds known vulnerabilities in container images
Cloud SecurityFast vulnerability scanner
Freemium
Open source
Headscale
Self-hosted, open source server for a Tailscale network
Network DefenseSelf hosted Tailscale server