Open source
Nuclei
Open source scanner that runs vulnerability checks from templates
Web ScanningTemplate based vuln scanner
Alternatives to WPScan
12 tools like WPScan, chosen by what they do. About WPScan
Curated
Detectify
Cloud scanner for exposed assets, APIs and web applications
Web ScanningAttack surface scanner
Open source
testssl.sh
Command line tool that tests TLS and SSL server configurations
Web ScanningCommand line TLS tester
Curated
StackHawk
Security testing for running apps, with fixes from coding agents
Web ScanningDeveloper first DAST
Freemium
Shodan
Search engine that indexes internet-connected devices and services
Web ScanningSearch engine for devices
Open source
Trivy
Open source scanner for vulnerabilities and misconfigurations
Code SecurityOpen vulnerability scanner
Open source
OSV-Scanner
Finds known vulnerabilities in your project's dependencies
Code SecurityGoogle open source scanner
Open source
Grype
Open source CLI that finds known vulnerabilities in container images
Cloud SecurityFast vulnerability scanner
Freemium
Snyk
Finds security risks in AI-written code, agents and apps
Code SecurityFind and fix vulnerabilities
Open source
Semgrep
Scans source code and dependencies for security issues
Code SecurityFast code security scanning
Freemium
Burp Suite
Web security testing toolkit for manual and automated scanning
Pentest and BountyWeb security testing toolkit
Open source
Zed Attack Proxy (ZAP)
Free open source scanner for finding security flaws in web apps
Web SecurityFree web app scanner