Nuclei
6.8#4 in web application security scannersFree planFree planLinuxmacOSSelf-hostedWindows
VisitNuclei vs Wapiti
What both publish
| Fact | Nuclei | Wapiti |
|---|---|---|
| Authentication | Nuclei supports authentication mechanisms including HTTP basic authentication and JWT token authentication. | It supports Basic, Digest, and NTLM authentication, login forms, browser cookie imports, and custom Python code for complicated authentication cases. |
| Installation | The official installation guide lists Go, Homebrew, Docker, GitHub, binary, and Helm installation methods. | The project homepage offers installation with pip install wapiti3. |
| License | Nuclei is distributed under the MIT License. | The README states that Wapiti is released under the GNU General Public License version 2. |
| Purpose | Nuclei is a vulnerability scanner for probing applications, infrastructure, cloud platforms, and networks using YAML templates. | Wapiti is a Python web vulnerability scanner that audits websites and web applications. |
| Support | The open-source page says maintainers answer questions in Discord and template requests can be filed as GitHub issues. | The project README directs users to its FAQ and invites bug reports through GitHub issues. |
Nuclei plans
- Nuclei CLIFree
Wapiti plans
- Free and open-sourceFree
Pick Nuclei if…
Nuclei may suit security engineers, analysts, red teams, DevOps teams, bug bounty hunters, and penetration testers who need template-based vulnerability checks. Its CI/CD options also fit teams automating security tests and regression checks.
Pick Wapiti if…
Wapiti suits developers and security teams auditing deployed web applications or REST APIs, including authenticated areas. It is for users who can meet its Python requirements and have the target owner's consent.