Vulnerability Scanning

Aqua Trivy

Developer Experience Platforms

Open-source vulnerability scanner from Aqua Security that finds CVEs in container images, IaC, and Git repositories.

AppCheck NG

Dynamic Application Security Testing

Dynamic application and infrastructure security scanner providing automated penetration testing at scale.

Trivy

Supply Chain Security

Trivy by Aqua Security is an open-source comprehensive vulnerability scanner for containers, filesystems, Git repositories, and Kubernetes configurations.

Patchstack

Vulnerability Management

WordPress vulnerability patching and monitoring

Nuclei

Dynamic Application Security Testing

Open-source vulnerability scanner using YAML-based templates to find security issues across modern tech stacks.

Anchore

Data Pipeline Orchestration

Anchore provides container security and software supply chain compliance tools that help organizations enforce security policies for container images throughout the development pipeline.

GuardRails AppSec

Code Security Scanning

Application security platform scanning for vulnerabilities in code.

Acunetix

Static Application Security Testing

Invicti-owned web vulnerability scanner providing automated DAST to detect and report on SQL injection, XSS, and thousands of other web vulnerabilities.

Black Duck

Code Snippet Management

Black Duck provides software composition analysis that helps organizations manage security, quality, and license compliance risks from open-source and third-party code.

nmap

Penetration Testing

Free and open-source utility for network discovery and security auditing used by millions.

Qualys

Dynamic Application Security Testing

Qualys provides cloud-based vulnerability management and web application scanning that helps organizations identify and prioritize security risks across their attack surface.

Greenbone

Compliance Management

Open-source vulnerability management provider maintaining OpenVAS and delivering enterprise vulnerability scanning and compliance checking.

AccuKnox

OT Security

AccuKnox provides zero-trust runtime security for containers and Kubernetes using eBPF-powered monitoring and dynamic policy enforcement.

BinaryEdge

Vulnerability Scanning

Internet scanning and exposure monitoring data service

Jetpack Scan

Security Compliance

WordPress malware scanning and backup by Automattic

Edgescan

Vulnerability Management Platforms

Full-stack vulnerability management platform combining scanning, pentesting-as-a-service, and API discovery with a human validation layer.

Pentest-Tools.com

Penetration Testing

Pentest-Tools.com provides a cloud-based platform for automated penetration testing with vulnerability scanning, attack surface discovery, and reporting tools.

FOSSA

Cybersecurity

FOSSA is a software composition analysis platform that automates open-source license compliance, vulnerability scanning, and SBOM generation for enterprise development teams.

Wiz

Cloud Hosting

Wiz provides agentless cloud security including container vulnerability scanning, runtime protection, and Kubernetes security as part of its comprehensive CNAPP platform.

Docker

Configuration Management Tools

Docker is a platform for developing, shipping, and running applications in containers. It provides tools for building container images, managing registries, and orchestrating containerized w...

Vulncheck

Threat Intelligence Platforms

Exploit and vulnerability intelligence platform

Nessus

Vulnerability Management

Industry-standard vulnerability scanner providing comprehensive assessment capabilities for identifying vulnerabilities, misconfigurations, and malware.

Treescale

Container Registry

Private Docker registry service with vulnerability scanning and team collaboration features.

Burp Suite

Mobile Application Security

PortSwigger's leading web vulnerability scanner used by security professionals for penetration testing.

HackerTarget

Attack Surface Management

Online attack surface mapping and vulnerability scanning platform for security teams and penetration testers.

ConnectSecure

Cybersecurity

Vulnerability scanning for MSPs.

Checkmarx

Supply Chain Planning

Checkmarx provides a comprehensive application security platform including software composition analysis, SAST, DAST, and API security for enterprise DevSecOps programs.

Kubescape

Code Security Scanning

Open source Kubernetes security platform from ARMO scanning clusters for misconfigurations, vulnerabilities, and compliance issues.

Wordfence

Mobile Application Security

WordPress security plugin with firewall and malware scanning

HostedScan

Code Security Scanning

Continuous vulnerability scanning SaaS for SMB

Invicti

Dynamic Application Security Testing

Invicti provides automated web application security testing that combines DAST and IAST approaches for comprehensive vulnerability detection with proof-based scanning.

OWASP ZAP

Dynamic Application Security Testing

Free, open-source web application security scanner maintained by OWASP for finding vulnerabilities in web applications during development and testing.

SanerNow

Patch Management

CyberHygiene platform with vulnerability and patch management