Tools / Category

Security Testing

Tools for security testing and scanning.

40 tools

A
Acunetix
Invicti Web + API is an end-to-end web security scanner that offers a 360 view of an organization’s security.
- security-testing
- trial-version
- paid
Add Acunetix to compare
A
Aircrack-ng
WiFi security auditing tools suite.
- security-testing
- free
- open-source
Add Aircrack-ng to compare
A
AppSpider
A dynamic application security testing tool with API security features.
- security-testing
- trial-version
- paid
Add AppSpider to compare
A
Arachni
Web Application Security Scanner Framework.
- security-testing
- free
- open-source
Add Arachni to compare
A
Astra
Astra Security is a one of a kind AI powered automated Pentest Platform that makes chaotic pentests a breeze & continuous with its hacker-style vulnerability scanner.
- security-testing
- trial-version
- paid
Add Astra to compare
B
Beagle Security
The AI-powered AppSec platform that identifies vulnerabilities with comprehensive penetration tests and provides actionable remediation insights.
- security-testing
Add Beagle Security to compare
B
Black Duck
Black Duck delivers True Scale Application Security — SAST, SCA, DAST, and AI-powered AppSec — to help security and development teams detect vulnerabilities, manage open…
- security-testing
- trial-version
- paid
Add Black Duck to compare
B
Burp Collaborator
Burp Collaborator is a network service that enables you to detect invisible vulnerabilities.
- security-testing
- paid
Add Burp Collaborator to compare
B
Burp Suite
PortSwigger offers tools for web application security, testing, & scanning.
- security-testing
- trial-version
- paid
- desktop-client
Add Burp Suite to compare
C
Checkmarx
Checkmarx agentic application security software platform Combines Hybrid scanning, AI-powered agents, and unified risk intelligence across every attack surface.
- security-testing
- paid
- trial-version
Add Checkmarx to compare
C
Cobalt Strike
Adversary simulation tool for red team operations and security assessments.
- security-testing
- paid
Add Cobalt Strike to compare
C
CodeScan
AutoRabit CodeScan™ secures and optimizes your Salesforce DevOps pipeline by providing real-time static code analysis and continuous compliance.
- security-testing
- paid
Add CodeScan to compare
C
Codified Security
Security testing for mobile applications with continuous integration support.
- security-testing
Add Codified Security to compare
D
Dependency-Check
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
- security-testing
- free
- open-source
Add Dependency-Check to compare
D
Detectify
Find what's exposed and fix what matters, before attackers do.
- security-testing
Add Detectify to compare
G
Google Nogotofail
Security testing tool for networks, focusing on detecting traffic interception vulnerabilities.
- security-testing
- free
- open-source
- deprecated
Add Google Nogotofail to compare
I
ImmuniWeb
AI-driven platform for application security testing and monitoring.
- security-testing
Add ImmuniWeb to compare
I
Invicti (formerly Netsparker)
Web vulnerability scanner for automated detection of security issues in web applications.
- security-testing
- paid
Add Invicti (formerly Netsparker) to compare
K
Kali Linux
Home of Kali Linux, an Advanced Penetration Testing Linux distribution used for Penetration Testing, Ethical Hacking and network security assessments.
- security-testing
- free
- open-source
Add Kali Linux to compare
M
Metasploit
Find security issues, verify vulnerability mitigations & manage security assessments with Metasploit.
- security-testing
- trial-version
- paid
Add Metasploit to compare
M
Micro Focus Fortify
A suite of tools for application security, including API security testing.
- security-testing
- trial-version
- saas
- cloud
Add Micro Focus Fortify to compare
N
Nessus
Find out more about Nessus - the trusted gold standard for vulnerability assessment, designed for modern attack surfaces - used by thousands of organizations.
- security-testing
- trial-version
- paid
Add Nessus to compare
N
Netsparker Cloud (Invicti)
Cloud-based security testing tool for automated web vulnerability scanning.
- security-testing
Add Netsparker Cloud (Invicti) to compare
N
Nikto
Nikto web server scanner.
- security-testing
- free
- open-source
Add Nikto to compare
N
Nmap
Nmap - the Network Mapper.
- security-testing
- free
- open-source
Add Nmap to compare
O
OpenVAS
Framework for vulnerability scanning and management.
- security-testing
- free
- open-source
Add OpenVAS to compare
O
OWASP ZAP
The ZAP by Checkmarx Core project.
- security-testing
- free
- open-source
- trrafic-capture
Add OWASP ZAP to compare
P
Parasoft SOAtest
Optimize API and web service testing with AI-enhanced SOAtest.
- api-testing
- load-testing
- security-testing
- trial-version
Add Parasoft SOAtest to compare
P
Paros Proxy
Reviews, ratings, and information about Paros proxy: web proxies, web vulnerability scanners,.
- security-testing
- free
- open-source
- deprecated
Add Paros Proxy to compare
P
Probely
Web vulnerability scanner designed for continuous security testing.
- security-testing
- trial-version
- paid
Add Probely to compare
Q
Qualys
Discover how Qualys helps your business measure & eliminate cyber threats through a host of cybersecurity detection & remediation tools.
- security-testing
- trial-version
- paid
- saas
Add Qualys to compare
R
Retina CS (BeuyondTrust)
Network security assessment tool with centralized vulnerability management features.
- security-testing
- paid
Add Retina CS (BeuyondTrust) to compare
S
Semgrep
Semgrep is a fast static-analysis engine with a free open-source CLI and a paid platform for cross-file rules, supply chain, and secrets.
- security-testing
- free-version
- paid
- open-source
Add Semgrep to compare
S
Snyk
Snyk CLI scans and monitors your projects for security vulnerabilities.
- security-testing
- trial-version
- paid
- static-analysis
Add Snyk to compare
S
SonarQube
Modernize your AI workflows with code verification for the agentic era.
- security-testing
- free
- open-source
Add SonarQube to compare
S
SQLMap
Automatic SQL injection and database takeover tool.
- security-testing
- free
- open-source
Add SQLMap to compare
V
Veracode
Manage application security risks effectively with Veracode's Application Risk Management platform, built for today's AI-driven world.
- security-testing
- trial-version
- paid
Add Veracode to compare
W
Wapiti
Wapiti is a free and open-source web application vulnerability scanner (DAST).
- security-testing
Add Wapiti to compare
W
WebInspect
Dynamic application security testing tool for identifying vulnerabilities in web applications.
- security-testing
- trial-version
- paid
Add WebInspect to compare
W
Wfuzz
Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value…
- security-testing
- free
- open-source
Add Wfuzz to compare

View in the tools directory