Burp Suite
Vulnerability Scanning
PortSwigger's leading web vulnerability scanner used by security professionals for penetration testing.
Free planFree trialPer seatDynamic Application Security TestingCI/CD
Price$41.58+ / user / month
Alternatives to OWASP ZAP
- 1Dynamic Application Security Testing, Vulnerability Scanning
- 2Dynamic Application Security Testing
Akto
API Security
Open-source API security platform for testing, finding, and protecting against API vulnerabilities.
Agentic AI discoveryAutomated agentic red teamingAPI discovery and inventory - 3Dynamic Application Security Testing, Vulnerability Scanning
AppCheck NG
Dynamic Application Security Testing
Dynamic application and infrastructure security scanner providing automated penetration testing at scale.
Free trialPenetration Testing as a ServiceMobile Application SecurityPrice$390.84+ / month
- 4Dynamic Application Security Testing
Mend.io
Software Composition Analysis
Mend.io is a software composition analysis and application security platform that helps development teams identify and remediate vulnerabilities in open-source dependencies.
Automated dependency updatesReachability analysisPrice$20.83+ / month
- 5Dynamic Application Security Testing, Penetration Testing
Invicti
Dynamic Application Security Testing
Invicti provides automated web application security testing that combines DAST and IAST approaches for comprehensive vulnerability detection with proof-based scanning.
API discovery and testingPrice$499.58+ / month
- 6Dynamic Application Security Testing, Vulnerability Scanning
Nuclei
Vulnerability Scanning
Open-source vulnerability scanner using YAML-based templates to find security issues across modern tech stacks.
Free planDynamic Application Security TestingDevSecOps Platforms - 7Dynamic Application Security Testing, CI/CD
StackHawk
Dynamic Application Security Testing
Developer-centric DAST tool that runs application security testing in CI/CD pipelines to find and fix AppSec bugs before they hit production.
Free trialSOC 2Per seatCI/CDContinuous Testing - 8Dynamic Application Security Testing, Penetration Testing
Metasploit
Penetration Testing
Rapid7's open-source penetration testing framework with thousands of exploits and auxiliary modules.
Vulnerability verification - 9Dynamic Application Security Testing, Penetration Testing
Escape
API Security
API security platform finding and fixing vulnerabilities in APIs with business logic testing and runtime monitoring.
AI powered business logic security testingContinuous API discovery and inventoryRest and graphql API testing - 10Dynamic Application Security Testing
Waratek
Dynamic Application Security Testing
Runtime application security platform providing virtual patching and RASP protection for Java applications without code changes.
Compiler based runtime securityZero day vulnerability protectionShift left and shield right framework
