18.2
Free planAndroidiOSWeb
Alternatives to OWASP DevGuard
OWASP DevGuard brings code, dependencies, container images, infrastructure-as-code and deployed artifacts into a single vulnerability workflow. Its pipeline covers secrets, SAST, SCA, IaC, containers and license compliance, while CVSS-BE, EPSS and component depth help rank findings. CycloneDX SBOMs, VEX workflows, scanner imports, issue synchronization and a dependency proxy for npm, Go and PyPI connect detection with follow-up work. Teams can run it through Kubernetes or…
28.0
OWASP DefectDojo collects security scanner findings, removes duplicates, helps prioritize risk, and supports remediation.
Free planOpen sourceWebAPILinux
37.9
ManageEngine Vulnerability Manager Plus identifies and assesses network vulnerabilities, then helps teams prioritize and remediate them.
Free planWebAPILinux
- 4
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 5
Intruder
Intruder provides continuous vulnerability scanning for infrastructure, web applications, APIs and cloud environments, with issue prioritization and remediation guidance.
Free planWebAPILinuxmacOS7.4Free plan - 6
Vicarius vRx
Vicarius vRx combines vulnerability management with patch management, patchless protection, and scripting to help teams remediate security findings.
WebAPILinuxmacOS6.8From $4 a month - 7
WPSec
WPSec is a cloud-based security scanner for WordPress websites, available on the web and through an API.
Free planWebAPI6.6From €19 a month - 8
Nanitor
Free planWebLinuxmacOSWindows6.5From $6 a month - 9
SAINT Security Suite
SAINT Security Suite is Carson & SAINT’s on-premises vulnerability management software for organizations that need scanning, assessment, and remediation tracking.
APILinuxSelf-hostedWindows6.5$3,400 one-time - 10
Patchstack
Patchstack provides vulnerability mitigation for websites, including WordPress components and npm dependencies.
WebAPI6.4From $69 a month - 11
Cisco Catalyst Center
Cisco Catalyst Center is a centralized controller and management dashboard for enterprise network operations.
WebAPILinuxmacOS6.2 - 12
Edgescan
AndroidiOSWebAPI6.1 - 13
Bugcrowd External Attack Surface Management
Bugcrowd External Attack Surface Management, also called Savant Vista, gives teams ongoing visibility into externally reachable assets associated…
Web6.0 - 14
Holm Security Vulnerability Management
Holm Security Vulnerability Management is a vulnerability management platform for finding, assessing, prioritizing, and helping remediate risks…
WebAPILinuxSelf-hosted5.9 - 15
Rapid7 InsightVM
WebLinuxmacOSWindows5.9From $1.62 a month - 16
Teravul
Teravul is an enterprise vulnerability management platform for security teams and defenders.
WebAPISelf-hosted5.8 - 175.7
- 18
Cyberwatch Vulnerability Manager
WebAPILinuxSelf-hosted5.6 - 195.6From $2,195 a month
- 20
5.5From $3,500 a month - 21
Archer Vulnerability Risk Management
Archer Vulnerability Risk Management helps security teams decide which vulnerabilities to address based on business risk.
WebSelf-hosted5.4 - 22
Hackmetrix
Web5.4 - 23
Hackuity
WebAPISelf-hosted5.4 - 24
Nucleus Security
Nucleus Security is a vulnerability management platform aimed at large enterprises and government organizations.
WebAPI5.4 - 25
Vulloop
Vulloop is a cloud-based vulnerability risk management service that links a software inventory with CVEs affecting those assets.
Web5.2 - 265.0
- 27
Tanium Comply
LinuxmacOSWindows5.0 - 28
Tenable Security Center
WebLinux5.0 - 294.8
- 30
4.8