- OWASP ZAPFree
Free, community-maintained web app security scanner: proxies traffic, fuzzes inputs, and flags common vulnerabilities.
3 reviews 14 up
8 - Burp SuiteFree Community edition; paid Professional/Enterprise
Industry-standard toolkit for manual and semi-automated web app penetration testing, built around an intercepting proxy.
3 reviews 85 up
79 - NessusPaid
Vulnerability scanner covering network, OS, and configuration weaknesses — commonly used for infrastructure-level security checks.
2 reviews 64 up
63 - NiktoFree
Lightweight open-source web server scanner checking for outdated software, dangerous files, and known misconfigurations.
3 reviews 24 up
14