30 alternatives · from penetration testing software

Alternatives to Kali Linux

Kali Linux is a Debian-based distribution for advanced penetration testing and security auditing. Its tools cover computer forensics, reverse engineering, vulnerability detection, and related information-security work. It supports custom ISO builds, live USB sessions that leave the host operating system untouched, and deployments across virtual machines, cloud, containers, ARM devices, and Windows Subsystem for Linux. Kali NetHunter also brings a Kali container, desktop…

17.7

Pentesterra

Pentesterra is a security orchestration platform combining vulnerability management, automated network and web pentesting, breach and attack…

Free planWebAPIExtension

From €23 a month

Visit Details

27.6

OWASP ZAP

OWASP ZAP, now identified as ZAP or ZAP by Checkmarx, is a free, open-source web application scanner and proxy for security testing.

Free planOpen sourceAPIExtensionLinux

Free plan

Visit Details

37.1

Dradis

Dradis is a security assessment platform for organizing work from engagement kickoff through collaboration, reporting, remediation, and workflow automation.

Free planWebAPILinux

From $3,600 a year

Visit Details

4
w3af
w3af is a free, open-source web application security scanner for developers and penetration testers assessing web vulnerabilities.
Free planWebAPILinuxmacOS
6.8Free plan
Visit
5
Caido
Caido is a web security auditing toolkit built to support manual testing through traffic inspection, automation, AI, and teamwork.
Free planWebAPILinuxmacOS
6.6Free plan
Visit
6
PenPeeper
PenPeeper is an open-source penetration testing engagement manager for security professionals.
Free planLinuxmacOSWindows
6.5Free plan
Visit
7
PenTest.WS
PenTest.WS is a penetration-testing application for organizing hosts, services, vulnerabilities, and credentials, then documenting results in reports.
WebAPILinuxmacOS
6.5From $4.95 a month
Visit
8
RedAmon
RedAmon is a free, open-source framework for automating red-team reconnaissance, exploitation, and post-exploitation operations.
Free planWebAPILinuxmacOS
6.5Free plan
Visit
9
Burp Suite DAST
Burp Suite DAST is an automated dynamic web vulnerability scanner built on the scanning engine used in Burp Suite Professional.
WebAPILinuxSelf-hosted
6.4
Visit
10
AttackForge
WebAPILinuxSelf-hosted
6.3From $50 a month
Visit
11
Reconmap
Reconmap is an open-source collaboration platform for InfoSec professionals planning, carrying out, and documenting penetration test projects.
Free planWebAPILinuxmacOS
6.2Free plan
Visit
12
Revelion
Free planWebLinux
6.2From £99 a month
Visit
13
Aircrack-ng
Aircrack-ng is a free suite of command-line tools for assessing Wi-Fi network security.
Free planLinuxmacOSSelf-hostedWindows
6.1Free plan
Visit
14
Core Impact
APISelf-hostedWindows
6.1From $9,450 a year
Visit
15
Pentographer
Pentographer is an open-source platform for organizing security assessments, including findings, playbooks, evidence, and client reports.
Free planWebAPILinuxSelf-hosted
6.1Free plan
Visit
16
Bugcrowd External Attack Surface Management
Bugcrowd External Attack Surface Management, also called Savant Vista, gives teams ongoing visibility into externally reachable assets associated…
Web
6.0
Visit
17
Cairn
WebSelf-hosted
6.0From $99 a month
Visit
18
Equixly
Equixly is a paid API and application security platform that uses AI agents to discover, attack, and validate exploitable risks in running systems.
WebAPI
6.0€4,999 one-time
Visit
19
BlackArch Linux
BlackArch Linux is an Arch Linux-based penetration testing distribution for penetration testers and security researchers.
Free planLinuxSelf-hosted
5.9Free plan
Visit
20
NodeZero
NodeZero is a security platform that autonomously runs penetration tests to find exploitable attack paths, guide remediation, and verify fixes.
WebAPILinuxSelf-hosted
5.9
Visit
21
Offensive360 DAST
Offensive360 DAST dynamically tests live web applications and APIs with a headless browser, more than 40 active exploit checks, and 19 passive analyzers.
WebAPISelf-hosted
5.9
Visit
22
OWASP Security-C4PO
OWASP Security-C4PO is a free, open-source web application for managing and documenting penetration tests.
Free planWebSelf-hosted
5.9Free plan
Visit
23
Penti
WebAPISelf-hosted
5.9From $20 a month
Visit
24
Ghostwriter
Ghostwriter is an open-source workspace for red teams and consultants to organize security assessments, from client and project details to assets,…
Free planWebAPISelf-hosted
5.8Free plan
Visit
25
Faraday
Faraday is a vulnerability and application-security platform that centralizes scanner findings, removes duplicates, and helps teams prioritize issues.
WebAPILinuxSelf-hosted
5.7
Visit
26
Pentera Platform
Pentera Platform validates security controls by emulating attacks, helping teams prioritize demonstrated exposure and support remediation.
WebAPILinuxSelf-hosted
5.7
Visit
27
Wifiphisher
Wifiphisher is a free Linux framework for penetration testers conducting red team engagements or Wi-Fi security testing.
Free planLinuxSelf-hosted
5.7Free plan
Visit
28
PENTRA
PENTRA is a penetration testing and vulnerability management platform for internal security teams, pentesters, Blue Teams, SOC analysts,…
WebSelf-hostedWindows
5.5
Visit
29
PlexTrac
WebAPISelf-hosted
5.4
Visit
30
XBOW
XBOW is a cloud security platform for interactive web applications and their APIs.
WebAPI
5.4
Visit

Back to Kali Linux