Best QuickPatch+ Alternatives in 2024
Find the top alternatives to QuickPatch+ currently available. Compare ratings, reviews, pricing, and features of QuickPatch+ alternatives in 2024. Slashdot lists the best QuickPatch+ alternatives on the market that offer competing products that are similar to QuickPatch+. Sort through QuickPatch+ alternatives below to make the best choice for your needs
-
1
Hacken
Hacken
Many web applications store sensitive data, including financial information and user information. This makes them very attractive to malicious attackers. As web applications become more complex, so will the number of exploitable vulnerabilities. Hacken's web penetration test services are crucial for our clients. Security should be a top priority for all businesses. We offer support and knowledge to help businesses secure themselves. Hacken provides cybersecurity services to businesses of all sizes and customers around the globe. Blockchains were originally created to facilitate the development and use of cryptocurrency. However, they are now used by many businesses for smart contracts, asset record management, online transaction management, asset records management, and security. They act as digital ledgers that are distributed in an infrastructure. They allow for the secure storage and structuring important information in a way that ensures integrity. -
2
Crashtest Security
Crashtest Security
€35 per month 5 RatingsCrashtest Security, a SaaS-based security vulnerability scanner, allows agile development teams to ensure continuous security even before reaching Production. Our state-of the-art dynamic application security test (DAST), integrates seamlessly into your development environment and protects multipage and JavaScript applications, as well microservices and APIs. Crashtest Security Suite can be set up in minutes. You will also have advanced crawling options and the ability to automate your security. Crashtest Security can help you keep your code and customers safe by allowing you to see vulnerabilities in the OWASP Top 10. -
3
SaltStack is an intelligent IT automation platform that can manage, secure, and optimize any infrastructure--on-prem, in the cloud, or at the edge. It is built on an event-driven automation engine that detects and responds intelligently to any system. This makes it a powerful solution for managing complex environments. SaltStack's new SecOps offering can detect security flaws and mis-configured systems. This powerful automation can detect and fix any issue quickly, allowing you and your team to keep your infrastructure secure, compliant, and up to date. Comply and Protect are both part of the SecOps suite. Comply scans for compliance with CIS, DISA, STIG, NIST and PCI standards. Also, scan your operating system for vulnerabilities and update it with patches and patches.
-
4
Acunetix is the market leader for automated web application security testing and is the preferred tool for many Fortune 500 customers. Acunetix can detect and report on a wide range of web application vulnerabilities. Acunetix's industry-leading crawler fully supports HTML5/JavaScript and Single-page applications. This allows auditing of complex, authenticated apps. Acunetix is the only technology that can automatically detect out of-band vulnerabilities. It is available online as well as on-premise. Acunetix includes integrated vulnerability management capabilities to help enterprises manage, prioritize and control all types of vulnerability threats. These features are based on business criticality. Acunetix is compatible with popular Issue Trackers, WAFs, and is available online on Windows, Linux, and Online
-
5
Scuba Database Vulnerability Scanner. Scuba is a free tool that reveals hidden security risks. Check enterprise databases for potential vulnerabilities and misconfigurations. Know the risks to your database. Get advice on how to address identified issues. Scuba is available for Windows, Mac and Linux (x32) and Linux (x64). It offers over 2,300 assessment tests for Oracle and Microsoft SQL, SAP Sybase and IBM DB2 as well as MySQL. Scuba scans enterprise databases for security flaws and configuration flaws. It is free and allows you to identify potential security risks. It contains more than 2,300 assessments for Oracle, Microsoft SQL Server and SAP Sybase. Scuba scans can be performed from any Windows, Mac, or Linux client. A typical Scuba scan takes between 2 and 3 minutes depending on the size of your database, users, groups, and network connection. There are no other requirements or pre-installation.
-
6
Invicti (formerly Netsparker) dramatically reduces your risk of being attacked. Automated application security testing that scales like none other. Your team's security problems grow faster than your staff. Security testing automation should be integrated into every step in your SDLC. Automate security tasks to save your team hundreds of hours every month. Identify the critical vulnerabilities and then assign them to remediation. Whether you are running an AppSec, DevOps or DevSecOps program, help security and development teams to get ahead of their workloads. It's difficult to prove that you are doing everything possible to reduce your company's risk without full visibility into your apps, vulnerabilities and remediation efforts. You can find all web assets, even those that have been forgotten or stolen. Our unique dynamic + interactive (DAST+ IAST) scanning method allows you to scan the corners of your apps in a way that other tools cannot.
-
7
PHP Secure
PHP Secure
PHP Secure is an online code scanner that scans your PHP code to find critical security vulnerabilities. Online scanner for free: - Quickly find web app vulnerabilities - Provides explicit reports and recommends fixes for vulnerabilities - No special knowledge is required to use the product. - Reduces risks, saves money, and increases productivity PHP Secure Scanner can be used to analyze sites built on Php, Laravel framework, CMS Wordpress Drupal and Joomla. PHP Secure detects and blocks the most dangerous and common types of attacks. -SQL injection vulnerabilities Command Injection -Cross-Site Scripting (XSS) Vulnerabilities -PHP Serialize Injections Remote Code Executions -Double Escaping -Directory Crossing ReDos (Regular Expression of Denial of Services) -
8
Website security is made easy by automatically detecting and fixing threats. Protect your website, reputation, visitors, and website from cyberthreats automatically Comprehensive website security software protects you website from malicious cyber threats. This includes protection for your website code and web applications. You will receive website scans daily, automated malware removal and vulnerability/CMS patches. There will also be a web application firewall that blocks harmful traffic from reaching your site. Our website security scan instantly scans your website for malware, viruses, and other cyber threats. It also alerts you to any issues. Your website will be protected from malicious content by automatically detecting it and removing it. Our vulnerability scanner allows you to quickly check for vulnerabilities in your CMS before they are exploited.
-
9
Edgescan
Edgescan
Validated web application vulnerability scanning available on-demand, whenever you need it, and scheduled as frequently as you need. Our rich dashboard provides superior security intelligence and allows for continuous validation, trending, and metrics. The vulnerability scanning and validation service can be used as often as you wish. Retest on-demand. Edgescan can also notify you via SMS/email/Slack and Webhook if a vulnerability is discovered. Server Vulnerability Assessment (Scanning & Validation) covers over 80,000 tests. This tool is designed to ensure that your deployment, whether it's in the cloud or on-premise, is secure and securely configured. Experts validate and rate vulnerabilities and make them available via the dashboard for reporting and tracking. Edgescan is an approved scanning vendor (ASV) and provides continuous, verified vulnerability assessments. This exceeds the requirements of the PCI DSS. -
10
Reconwithme
ReconwithMe
$25 per monthThe app industry is expanding at a rapid pace. Web and mobile applications are the most popular tools for individuals, businesses, and organizations. Cyber attacks have increased with the growing popularity of these apps. Reconwithme can automatically detect and fix security flaws in your web applications. Reports that help you understand and fix vulnerabilities. You will receive complete reports for both developers and executives. They will include steps to reproduce the vulnerability as well as a recommendation on how to fix it. Track and prioritize bugs based on severity. A triage team will be available upon request to assist with fixing the vulnerabilities. -
11
Probely is a web security scanner for agile teams. It allows continuous scanning of web applications. It also lets you manage the lifecycle of vulnerabilities found in a clean and intuitive web interface. It also contains simple instructions for fixing the vulnerabilities (including snippets code). Using its full-featured API it can be integrated into development pipelines (SDLC) or continuous integration pipelines, to automate security testing. Probely empowers developers to become more independent. This solves the security team's scaling problem that is often undersized compared to development teams. It provides developers with a tool to make security testing more efficient, which allows security teams to concentrate on more important activities. Probely covers OWASP TOP10, thousands more, and can be used for checking specific PCI-DSS and ISO27001 requirements.
-
12
ManageEngine Vulnerability Manager Plus
ManageEngine
$695 per user per yearSoftware for enterprise vulnerability management. Vulnerability manager Plus is an integrated threat management software that provides comprehensive vulnerability scanning, assessment and remediation across all endpoints within your network from a single console. You can scan and find vulnerable areas on all your remote and local office endpoints, as well as roaming devices. Use attacker-based analytics to identify areas most likely to be exploited. Reduce the risk of security loopholes being exploited in your network and prevent new ones from developing. Prioritize vulnerabilities based upon their vulnerability, severity, age, affected systems count, and the availability of a fix. You can download, test, and automatically deploy patches to Windows, Mac, Linux and more than 250 third-party apps with an integrated patching module, all without additional cost. -
13
HTTPCS Security
Ziwit
$65 per monthYou can protect your website from all types of IT threats, including web vulnerability scanners, website monitoring, threat intelligence platforms, and web integrity controllers. HTTPCS solutions provide a strong shield against hackers. Secure Attitude with HTTPCS will ensure your website's security. The HTTPCS Cybersecurity Toolkit includes 4 additional modules that provide protection against hackers 24/7. Analyze your website's response times in real-time. Be notified via email and SMS if your website is unavailable. We offer a 99.999% guarantee of continuity of monitoring service, which is more precise than standard ping solutions. We offer a unique Monitoring scenario system that guarantees your customers' sites are operating. -
14
Tenable Web App Scanning
Tenable
Unified web application and API scanning is simple, scalable and automated. Tenable Web Application Scanning provides comprehensive dynamic application testing (DAST) for the top 10 OWASP risks, vulnerable web apps components, and APIs. Web application security by the largest vulnerability research team within the industry. Web application scans that are run in less than two minutes can provide immediate value by identifying common security hygiene issues. You can set up a web app scan within seconds using the same vulnerability management workflows that you are familiar with. Configure automated testing weekly or monthly of all your applications. Create widgets and dashboards that are fully customizable to integrate IT, web application, and cloud vulnerability data into one unified view. Tenable Web App Scanning can be used as a cloud solution, and is now seamlessly integrated with Tenable Security Center. -
15
Frontline Vulnerability manager is more than a vulnerability scanner or vulnerability assessment. It is a proactive, risk-based vulnerability management solution that is essential to any cyber risk management program. Its robust features make it stand out from other VM solutions. It provides vital security information in a central, easily understood format that allows you to protect your business's critical assets efficiently and effectively. Cyber attackers are now more focused on finding vulnerabilities in companies' networks. It is crucial to have a vulnerability management plan in place. A vulnerability management program goes beyond patch management, vulnerability scanners, and vulnerability assessments. The best vulnerability management solutions employ an ongoing process that identifies and evaluates, prioritizes and reports on vulnerabilities in network systems and software.
-
16
VAddy
VAddy
$55 per monthVAddy makes it easy for developers to become security experts. You can quickly identify vulnerabilities and fix them before they become embedded in your code. VAddy automatically runs as part your existing CI process. VAddy runs after every code update and alerts you if a commit contains vulnerabilities. We have all been in projects where a vulnerability discovered just before release caused the project to be canceled. Ensure that you are always performing high-quality security analyses throughout your development process to avoid any last-minute surprises. VAddy allows you visualize the frequency of security flaws caused by each member of your team or code module. You can quickly identify security problems and increase education to help developers or other team members with poor security knowledge. Our security experts constantly update our diagnostic engine with the latest threats. This allows your team to quickly develop secure applications without needing any domain knowledge. -
17
Nikto
CIRT.net
Nikto, an Open Source (GPL), web server scanner, performs extensive tests against web servers for multiple items. It checks for over 6700 potentially hazardous files/programs, outdated versions of more than 1250 servers, as well as version-specific problems on more than 270 servers. It will also check for server configuration items, such as multiple index files and HTTP server options. It will also attempt to identify any installed web servers or software. Scan items and plugins can be automatically updated. Nikto is not intended to be a stealthy tool. It will quickly test a web server and make it visible in log files and to an IPS/IDS. If you're interested in giving it a shot (or testing your IDS system), LibWhisker supports anti-IDS methods. While not all checks are a security issue, most are. -
18
DigitSec S4
DigitSec
S4 enables Salesforce DevSecOps to be established in the CI/CD pipeline within less than an hour. S4 empowers developers with the ability to identify and fix vulnerabilities before they reach production, which could lead to data breaches. Secure Salesforce during development reduces risk, and speeds up deployment. Our patented SaaS Security scanner™, S4 for Salesforce™, automatically assesses Salesforce's security posture. It uses its full-spectrum continuous app security testing (CAST), platform that was specifically designed to detect Salesforce vulnerabilities. Interactive Runtime Testing, Software Composition Analysis and Cloud Security Configuration Review. Our static application security testing engine (SAST) is a core feature in S4. It automates scanning and analysis for custom source code within Salesforce Orgs including Apex, VisualForce and Lightning Web Components and related-JavaScript. -
19
AppCheck
AppCheck
Highly configurable and technology-agnostic, sophisticated scanning engine created and maintained by top security experts. Safe exploitation and unparalleled support for modern HTML5 apps provide proof of concept evidence. All forms of authentication are supported via a scriptable browser interface. You can schedule and scan in granular detail, integrate with popular bug tracking platforms like JIRA, and create your own integration via JSON API. The dashboard gives you a customizable view of how your security is at any given time. Dashboard widgets make it easy to see the status of vulnerabilities discovered, emerging threats, and progress in remediation. AppCheck offers complete control, whether you are just looking for a quick scan or a more advanced user who requires full control. Scans can be performed in just a few clicks with profiles created by our security experts, or from scratch using the profile editor. -
20
Google Cloud Security and Risk Management Platform. You can see how many projects you have, which resources are being used, and which service accounts have been added/removed. Follow the actionable recommendations to identify security issues and compliance violations in your Google Cloud assets. Logs and powered with Google's unique threat information help you uncover threats to your resources. You can also use kernel-level instrumentation for potential container compromises. App Engine, BigQuery and Cloud SQL allow you to view and discover your assets in real-time across App Engine and Cloud Storage. To identify new, modified or deleted assets, review historical discovery scans. Learn about the security status of your Google Cloud assets. You can uncover common vulnerabilities in web applications such as cross-site Scripting and outdated libraries.
-
21
Strobes RBVM
Strobes Security
$999Strobes is a one stop shop for security stakeholders to ensure their enterprise is protected against cyber attacks and security issues. From viewing all security threats for each asset in the dashboard, to supporting integrations using leading scanners and bug bounty tool tools, Strobes is your one-stop shop solution. -
22
IBM Guardium Vulnerability Assessment scans your data infrastructures to detect vulnerabilities. It also suggests remedial actions. The solution identifies vulnerabilities such as missing patches and weak passwords. It also identifies unauthorized changes, misconfigured privileges, and unauthorized changes. The full reports and suggestions to fix all vulnerabilities are provided. Guardium Vulnerability Assessment detects behavior vulnerabilities such as account-sharing, excessive administrative logins, and unusual after hours activity. It identifies security gaps and threats in databases that hackers could exploit. Discover and classify sensitive information in heterogeneous environment. View detailed reports on entitlements and configurations that are risky. Automate compliance audits, exception management and exception management.
-
23
Nsauditor Network Security Auditor
Nsasoft
$69 one-time payment 1 RatingNsauditor network security auditor is a powerful tool that scans networks and hosts for potential vulnerabilities and provides security alerts. Vulnerability Scanning Software and Network Security Auditing Software Nsauditor network auditor scans the enterprise network for any possible hacker methods and generates a report. Network Security Auditing Software, Vulnerability Scaner Network Security Auditing Software, and VulnerabilityScanner Nsauditor Network Auditing Software significantly reduces the cost of managing enterprise networks. This software allows IT personnel and system administrators to gather information from all computers on the network without installing any server-side programs and creates a report detailing potential problems. -
24
VulnSign is an online vulnerability scan that is fully automated, configurable by customers and offers advanced features. VulnSign can scan all types of web applications, regardless of their technology. It uses a Chrome-based crawling engine to identify vulnerabilities in legacy, custom-built, modern HTML5, Web 2.0, and Single Page Applications (SPA) applications. It also offers vulnerability checks for popular frameworks. VulnSign's vulnerability scanner is easy to use. Most of the pre-scan configuration can also be automated. It's a complete vulnerability management solution that supports multiple users and integrates well with other systems. To test it, you only need to specify the URL and credentials (to scan password-protected websites) and launch a vulnerability scanner.
-
25
beSECURE
Beyond Security (Fortra)
Vulnerability Management and Assessment that is flexible, accurate, and low-maintenance. This solution delivers solid security improvements. This product is designed to provide the best and most efficient network security improvement tailored to your company's needs. Continuously scan for application and network vulnerabilities. Daily updates and specialized testing methods to detect 99.99% of vulnerabilities. Flexible reporting options that are data driven to empower remediation teams. *Bug bounty program* to cover any false positives that are discovered. Total organizational control. -
26
Qualys VMDR
Qualys
1 RatingThe industry's most flexible, extensible and scalable solution for vulnerability management. Qualys' VMDR is fully cloud-based and provides global visibility into your IT assets and how to protect them. Enterprises are empowered with visibility into cyber risk exposure and can use it to prioritize assets, vulnerabilities, or groups of assets according to business risk. Security teams can take steps to reduce risk. This helps businesses measure their true risk and track the progress of risk reduction. You can identify, assess, prioritize, patch and fix critical vulnerabilities in real-time across your global hybrid IT, OT and IoT landscape. Qualys TruRisk™, which measures risk across assets, vulnerabilities, and groups, can help you organization prevent risk exposure and track the risk reduction over time. -
27
Vega
Subgraph
Vega is able to help you identify and validate SQL Injection, cross site scripting, inadvertently revealed sensitive information, as well as other vulnerabilities. It runs on Linux, OS X and Windows. Vega can help identify vulnerabilities such as reflected cross-site, stored cross-site, blind SQL injections, remote file include, and shell injection. Vega can also check for SSL security settings and identify opportunities to improve the security of your TLS server. Vega also includes an automated scanner that can perform quick tests, and an intercepting proxy that can be used for tactical inspection. The Vega scanner detects SQL injection and other vulnerabilities. Vega has a website crawler that powers its automated scanner. Vega can log in to websites automatically when provided with user credentials. -
28
Barracuda Vulnerability Manager
Barracuda
Vulnerabilities on your website and other applications that are visible to the public can lead you to costly data breaches, which disrupt your business and undermine customer trust. There are hundreds ways to bring a website down, hack your data, or introduce malware into your system. More than 80 percent have vulnerabilities which put businesses and their data at risk. Don't wait for it to be too late. Barracuda Vulnerability manager is a free tool that scans websites and applications with just one click. Enter your website URL and you will receive a detailed report of all vulnerabilities. You can either fix the issues manually or load the report in a Barracuda web application firewall solution and use our vulnerability remedy service to automatically rectify them. -
29
Outpost24
Outpost24
With continuous security testing across all networks, devices, containers, and applications, you can better understand your attack surface and reduce cyber exposure to an attacker. You won't get any help if you have only limited information. Even the most experienced security personnel can be overwhelmed by the sheer volume of alerts and vulnerabilities that they must deal with. Our tools are powered by threat intelligence and machine-learning and provide risk-based insight to help prioritize remediation and decrease time to patch. Our predictive risk-based vulnerability management tools make your network security proactive. This will help you reduce the time it takes to patch and more efficiently remediate. This industry-leading process continuously identifies application flaws and secures your SDLC for faster and safer software releases. Cloud workload analytics, CIS configuration assessment, and contain inspection for multi- and hybrid clouds will help you secure your cloud migration. -
30
Vulkyrie
Vulkyrie
$99 per monthOver the past five years, more than 100,000 vulnerabilities in commonly used software were reported. More than 22,000 vulnerabilities were reported in 2019 and 1 out 3 were given a High or Critical severity rating. Our vulnerability scanning service is free and can help you find security problems before the bad guys do. The Free plan has no limit on the number and URLs of IP addresses or URLs that you can use, nor the number of vulnerability scans that you can run. You no longer need to choose between your web servers or Windows servers, network devices, or virtual machines, unlike free trials or community editions or free versions of vulnerability assessment tools. You can take the first step to better vulnerability management without the complicated and steep learning curve. Our web-based solution gives you an easy-to use interface to manage your security testing. To start a scan, simply add your URL or IP address to our portal. You will be able to view the results and recommend security measures. -
31
trackd
trackd
Our platform's unique patching history data will empower your remediation teams to patch faster and more confidently. The vast majority of patches are easily applied automatically, with little or no risk of disruption. However, there is still a legitimate concern among remediation teams about auto-patching most software systems. It is important to know which patches can be applied automatically and without risk, and which ones require human intervention. Our patent-pending platform gives you data and insight on the experience of other people who have implemented the patch. It helps identify which patches are likely cause disruption. Then, it provides a frictionless toolkit to automate vulnerability mitigation when it is safe. And, finally, we give you a head's up when patches are most likely to be disruptive. -
32
ZeroPath
ZeroPath
AI-powered code scanning can be used to identify and fix broken authentications, logic bugs, outdated dependency, and much more. ZeroPath is easy to set up and provides continuous human-level application protection, PR reviews, etc. ZeroPath can be set up in less than 2 minutes with your existing CI/CD. Supports Github GitLab and Bitbucket. ZeroPath reports fewer false-positives and finds more bugs than comparables. Find broken authentication and logic bugs. ZeroPath releases a press release instead of reporting bugs when it is confident that it will not break your application. Make sure your products are secure, without slowing development. -
33
YAG-Suite
YAGAAN
From €500/token or €150/ mo The YAG Suite is a French-made innovative tool that takes SAST to the next level. YAGAAN is a combination of static analysis and machine-learning. It offers customers more than a sourcecode scanner. It also offers a smart suite to support application security audits and security and privacy through DevSecOps design processes. The YAG-Suite supports developers in understanding the vulnerability causes and consequences. It goes beyond traditional vulnerability detection. Its contextual remediation helps them to quickly fix the problem and improve their secure coding skills. YAG-Suite's unique 'code mining' allows for security investigations of unknown applications. It maps all relevant security mechanisms and provides querying capabilities to search out 0-days and other non-automatically detectable risks. PHP, Java and Python are currently supported. Next languages in roadmap are JS, C and C++. -
34
Informer
Informer
$500 Per MonthInformer's 24/7 monitoring and automated digital footprint detection will reveal your true attack surface. Access detailed vulnerability data for web applications and infrastructure. Expert remediation advice is also available. Dashboards enable you to see and understand your evolving attack surfaces, track your progress, and accurately assess your security posture. You can view and manage your vulnerabilities and discovered assets in one place. There are multiple ways to help you quickly address your risks. Access to detailed management information is provided by the custom reporting suite, which was specifically designed to record asset and vulnerability data. You will be instantly alerted whenever there are any changes to your attack surface that could impact the overall security posture in your environment, 24 hours a day. -
35
Bytesafe
Bitfront
€1100 per monthAutomated best practices will increase your open source security posture. This workflow combines security and development teams into one seamless process. The cloud-native security platform reduces risks and protects revenue without slowing down developers. The dependency firewall blocks malicious open source before it reaches developers and infrastructure. This protects data, assets and company reputation. Our policy engine analyzes threat signals, such as known vulnerabilities, license information and customer-defined rules. It is vital to have an understanding of the open-source components used in applications in order to avoid exploitable vulnerabilities. Dashboard reporting and Software Composition Analysis (SCA), provide stakeholders with a comprehensive overview of the current situation. Find out when new open-source licences are added to the codebase. Automated tracking of license compliance issues and restriction of unlicensed packages. -
36
ThreatStryker
Deepfence
Runtime threat assessment, runtime attack analysis, and targeted protection of your infrastructure and applications. Zero-day attacks can be stopped by staying ahead of attackers. Observe attack behavior. ThreatStryker monitors, correlates, learns, and acts to protect your applications. Deepfence ThreatStryker displays a live, interactive, color-coded view on the topology and all processes and containers running. It inspects hosts and containers to find vulnerable components. It also interrogates configuration to identify file system, processes, and network-related misconfigurations. ThreatStryker uses industry and community standards to assess compliance. ThreatStryker conducts a deep inspection of network traffic, system behavior, and application behavior and accumulates suspicious events over time. The events are classified and correlated with known vulnerabilities and suspicious patterns. -
37
Eclypsium
Eclypsium
Eclypsium®, which protects enterprise devices at the hardware and fundamental firmware layers, ensures their health and integrity. This is something that traditional security cannot protect. Eclypsium adds a layer of security to protect the vital servers, networking gear, laptops, and computers at the heart of every company. Eclypsium provides security for the hardware and firmware, as opposed to traditional security that protects only the software layers of a device. Eclypsium detects and corrects low-level vulnerabilities and threats to traditional security, from the device's initial boot process to its most fundamental code. High-fidelity views of all enterprise devices, including servers, networking gear and laptops, are available. Automatically identify vulnerabilities and threats in every hardware and firmware component of each device. You can access devices on-premises and remotely, including remote work and BYOD. -
38
OpenSCAP
OpenSCAP
OpenSCAP provides many tools that can be used by auditors and administrators to help them assess, measure, and enforce security baselines. Our system is flexible and interoperable, which reduces the cost of security audits. OpenSCAP provides a wide range of configuration baselines and hardening guides that have been developed by the open-source community. This allows you to choose the security policy that best suits your organization's needs, regardless of its size. Security Content Automation Protocol (SCAP), is a U.S. standard that is maintained by the National Institute of Standards and Technology. OpenSCAP is an open-source project that implements and enforces this standard. It was awarded the SCAP1.2 certification by NIST in 2014. It is essential to ensure security compliance in an ever-changing world where new vulnerabilities are discovered and fixed every day. -
39
WebReaver
Websecurify
WebReaver is an easy-to-use, fully-automated web application security security test tool for Mac, Windows, and Linux. It is suitable for both novice and advanced users. WebReaver lets you quickly test any web application for a wide range of vulnerabilities, including SQL Injection, local or remote file Includes, command Injection and cross-site scripting. You can also test for the less serious ones like information leakage, variety of session and headers problems, and more. Automated security testing technologies such as those that rely on scanning, fuzzyzing, and sending arbitrary malicious information to detect security defects can cause serious damage to the web applications they are being used against. It is recommended that automated tests be performed only against systems in pre-production, testing, or demo environments. -
40
Brakeman
Brakeman
Brakeman is a security scanner for Ruby on Rails applications. Brakeman scans your application's source code, which is a different approach to other web security scanners. Brakeman does not require you to set up your entire application stack in order to use it. Brakeman scans your application code and generates a report detailing all security issues found. Once Brakeman is installed, it doesn't require any configuration or setup. Simply run it. Brakeman is a program that only requires source code. You can create a new application using rails new and then run Brakeman to check it. Brakeman doesn't rely on spidering sites for all pages. This allows it to provide a more comprehensive coverage of an application. This includes pages that may not yet be live. Brakeman can detect security flaws before they are exploitable. Brakeman was specifically designed for Ruby on Rails applications. It can check configuration settings for best practice. -
41
OpenVAS
Greenbone Networks
OpenVAS is a fully-featured vulnerability scanner. It can perform unauthenticated and authenticated testing as well as various high-level and lower-level industrial protocols. Performance tuning is available for large-scale scans. There is also an internal programming language that can be used to implement any vulnerability test. The scanner retrieves the tests to detect vulnerabilities from a feed with a long history and daily update. OpenVAS was developed by Greenbone Networks and has been moving forward since 2006. The scanner is part of the commercial vulnerability management product Greenbone Enterprise Appliance. It forms the Greenbone Vulnerability Management along with other Open Source modules. -
42
Mageni
Mageni Security
$39 per monthMageni offers a free vulnerability scanning platform and management platform that will help you find, prioritize, remediate, and manage vulnerabilities. -
43
Hacker Target
Hacker Target
$10 per monthHosted vulnerability scanners simplify the security assessment process. From vulnerability identification to attack surface discovery, host vulnerability scanners provide actionable network intelligence that can be used for IT and security operations. Proactively search for security weaknesses. From vulnerability identification to attack surface discovery, pivot. Trusted open-source tools can help you find security holes. Access tools used by security professionals and penetration testers around the globe. Analyze vulnerabilities from an attacker's perspective. Simulating real-world security events, testing vulnerabilities, and incident response. Open source intelligence and tools can help you discover the attack surface. Improved visibility will help protect your network. Last year, over 1 million scans were performed. Since 2007, our vulnerability scanners have been launching security packets. You must find security problems to fix them. Identify the problem, remediate the risk, and then test again to confirm. -
44
NNT Vulnerability Tracker
Netwrix
Vulnerability scanning is a vital foundational security control. Many are asking how to stay ahead of cyber attacks like WannaCry or Petya. NNT Vulnerability tracker™, which will identify any known vulnerabilities in your IT infrastructure, will help prevent them from being exploited. NNT's Vulnerability tracker™, which identifies vulnerabilities in software and configuration settings, is used to prevent cyber-attacks. Vulnerability Tracker continually tests and assesses your network and all devices connected to it against thousands upon thousands of Network Vulnerability Testings (NVTs). Daily new vulnerabilities are discovered by industry-respected content providers and trusted resources. These include CVE and Bugtraq alerts and aggregate compliance rulesets. Controls for scan agents, controls for scan agents, and embedded NMAP NSE testing routines. -
45
Hakware Archangel
Hakware
$100 3 RatingsHakware Archangel, an Artificial Intelligence-based vulnerability scanner and pentesting instrument, is called Hakware Archangel. The Archangel scanner allows organizations to monitor their systems, networks, and applications for security flaws with advanced Artificial Intelligence continuously testing your environment. -
46
VulScan
RapidFire Tools, a Kaseya Company
$99 per monthDiscover, prioritize, and manage internal and exterior vulnerabilities. VulScan's vulnerability scanning helps you harden your networks and protect them against evolving threats. VulScan provides a powerful tool to automate and complete vulnerability scanning. It detects and prioritises the weaknesses that hackers could exploit, empowering users to harden networks and create an extra layer of security. Flexible network scanning options will help you protect the networks that you manage. Vulscan offers on-premise internal network scanners, computer based discovery agents, remotely internal scanning via proxy, and hosted external scans for comprehensive vulnerability management. -
47
Inspectiv
Inspectiv
To reduce security incidents and give assurance to customers, identify complex security vulnerabilities and sensitive data. Bad actors continue to find new ways to compromise companies' systems. New vulnerabilities are introduced every time a company releases new code/products. Inspectiv's security experts are vigilant and will ensure that your security testing is updated as the security landscape changes. It can be difficult to fix security flaws in mobile and web applications. However, the right guidance can speed up remediation. Inspectiv makes it easy to receive and escalate vulnerability disclosures and provides clear, concise, and useful vulnerability reports for your team. Each vulnerability report shows impact and provides clear steps for remediation. Reports provide high-level translation of risk to executives, detail to engineers, and auditable references which integrate with ticketing systems. -
48
Seal Security
Seal Security
FreeSeal Security redefines open source vulnerability management and patch management. Integration directly into your SDLC and workflows. Standalone security updates for immediate resolution of critical issues. Predictable remediation, optimal resource allocation and centralized control with reduced R&D dependence. Streamline the open source vulnerability remediation process without introducing any risk of breaking changes. Seal Security will help you to stop being alert fatigued and begin patching. Pass any product security scan with confidence. Seal Security offers immediate remediation of open source vulnerabilities. By meeting the SLAs of your customers and offering a product that is free from vulnerabilities, you can build customer trust and strengthen your market position. Seal Security integrates seamlessly with various coding systems, patch management tools, and open-source platforms via powerful APIs and a CLI. -
49
Amazon Inspector
Amazon
Amazon Inspector is an automated security service that helps to improve security and compliance for applications deployed on AWS. Amazon Inspector automatically evaluates applications for vulnerabilities, exposure, and deviations to best practices. After performing an assessment, Amazon Inspector generates a detailed list with security findings sorted by severity. These findings can be viewed directly or as part a detailed assessment report that is available via the Amazon Inspector console, API. Amazon Inspector security assessments can help you identify vulnerabilities and unintended network access to your Amazon EC2 instances. Amazon Inspector assessments can be accessed as pre-defined rules packages that are mapped to common security best practice and vulnerability definitions. -
50
PT Application Inspector
Positive Technologies
PT Application Inspector is a source code analyzer that provides high-quality analysis and easy tools to automatically confirm vulnerabilities. This allows security specialists and developers to work more efficiently and speed up the process of creating reports. Combining static, dynamic, as well as interactive application security testing (SAST+ DAST+ IAST) yields unparalleled results. PT Application Inspector only identifies the real vulnerabilities, so you can concentrate on the issues that really matter. Special features such as automatic vulnerability verification, filtering and incremental scanning for each vulnerability, as well interactive data flow diagrams (DFDs) for each vulnerability, make remediation much faster. Reduce vulnerabilities in the final product, and reduce the cost of fixing them. Analyze the software at the very beginning of its development.