17.9
ManageEngine Vulnerability Manager Plus identifies and assesses network vulnerabilities, then helps teams prioritize and remediate them.
Free planWebAPILinux
Alternatives to Clair
27.6
OWASP ZAP, now identified as ZAP or ZAP by Checkmarx, is a free, open-source web application scanner and proxy for security testing.
Free planOpen sourceAPIExtensionLinux
37.4
Grype is a free, Apache-2.0-licensed vulnerability scanner for container images, filesystems, SBOMs, and individual packages.
Free planOpen sourceLinuxmacOSSelf-hosted
- 4
Intruder
Intruder provides continuous vulnerability scanning for infrastructure, web applications, APIs and cloud environments, with issue prioritization and remediation guidance.
Free planWebAPILinuxmacOS7.4Free plan - 5
OpenVAS
OpenVAS is a vulnerability scanner for finding weaknesses in IT systems.
Free planWebAPILinuxmacOS7.2From €2,524 a year - 6
Trivy
Trivy is a free, Apache-2.0-licensed scanner for code repositories, binary artifacts, container images, and Kubernetes clusters.
Free planLinuxmacOSSelf-hostedWindows7.0Free plan - 7
Detectify Surface Monitoring
Detectify Surface Monitoring continuously monitors internet-facing subdomains for exposed files, vulnerabilities, and misconfigurations.
Free planWebAPI6.9From €2,500 a year - 8
Kiuwan Code Security
Kiuwan Code Security is a static application security testing tool that finds and prioritizes vulnerabilities in source code and offers remediation…
WebAPILinuxmacOS6.8From $49 a month - 9
Nuclei
Nuclei is a free, open-source vulnerability scanner for applications, infrastructure, cloud platforms, and networks.
Free planLinuxmacOSSelf-hostedWindows6.8Free plan - 10
StackHawk HawkScan
StackHawk HawkScan is a dynamic application security testing scanner for web applications and APIs.
WebAPILinuxmacOS6.8From $10 a month - 11
Acunetix
Acunetix, now Invicti Web + API, scans running web applications and APIs for exploitable vulnerabilities.
WebAPILinuxSelf-hosted6.7$500 one-time - 12
Astra Security
Astra Security describes its product as a continuous penetration testing platform for web applications, APIs, and cloud infrastructure.
WebAPI6.5From $699 a year - 13
Burp Suite DAST
Burp Suite DAST is an automated dynamic web vulnerability scanner built on the scanning engine used in Burp Suite Professional.
WebAPILinuxSelf-hosted6.4 - 14
Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk.
WebAPISelf-hosted6.3$500 one-time - 15
Mend.io
Mend.io is a paid application security platform for code, AI components, and the attack surface connecting them.
Web6.1From $250 a year - 16
Rapid7 InsightVM
WebLinuxmacOSWindows5.9From $1.62 a month - 17
Tenable Nessus
Tenable Nessus is on-premises vulnerability-scanning software for assessing IP addresses, operating systems, network devices, databases, applications, and SCADA systems.
LinuxmacOSWindows5.8From $4,790 a year - 18
HCL AppScan Source
HCL AppScan Source is a static application security testing tool that analyzes source code for vulnerabilities early in the development lifecycle.
LinuxSelf-hostedWindows5.7 - 19
Rapid7 InsightAppSec
WebWindows5.5From $175 a month - 20
Tenable Security Center
WebLinux5.0 - 215.0
- 22
Checkmarx One
Checkmarx One is a web-based application security platform focused on source code analysis.
Web4.9 - 23
OpenText Fortify Software Security Platform
OpenText Fortify Software Security Platform is a web-based application security product for hybrid deployment environments.
Web4.9 - 244.9
- 254.9
- 26
Greenbone Community Edition
WebLinux4.8 - 27
XSpider
Windows4.5 - 284.3