Free
Let's Encrypt
Free, automated TLS certificates to enable HTTPS on your sites
Web SecurityFree HTTPS certificates
Alternatives to Zed Attack Proxy (ZAP)
12 tools like Zed Attack Proxy (ZAP), chosen by what they do. About Zed Attack Proxy (ZAP)
Free
Have I Been Pwned
Check if your email or password appeared in a known data breach
Web SecurityCheck for data breaches
Open source
Nuclei
Open source scanner that runs vulnerability checks from templates
Web ScanningTemplate based vuln scanner
Open source
OSV-Scanner
Finds known vulnerabilities in your project's dependencies
Code SecurityGoogle open source scanner
Free
OWASP Foundation
Nonprofit hub for free application security projects and standards
Security LearningOpen web security community
Open source
Grype
Open source CLI that finds known vulnerabilities in container images
Cloud SecurityFast vulnerability scanner
Open source
Trivy
Open source scanner for vulnerabilities and misconfigurations
Code SecurityOpen vulnerability scanner
Freemium
Burp Suite
Web security testing toolkit for manual and automated scanning
Pentest and BountyWeb security testing toolkit
Curated
Veracode
Platform for finding and fixing application security risks
Code SecurityApplication security platform
Curated
Detectify
Cloud scanner for exposed assets, APIs and web applications
Web ScanningAttack surface scanner
Paid
Sucuri
Website security service for malware cleanup and firewall
Network DefenseWebsite firewall and cleanup
Open source
ModSecurity
Open source web application firewall engine used with OWASP rules
Network DefenseOpen source WAF engine