swap_horiz Black Duck SCA Alternatives

1

Wireshark

Wireshark is an open source packet analyzer primarily utilized for network forensics and security analysis. It captures...

Open Source Packet Analysis 1990S Network Forensics

9.4 Excellent

2

PortSwigger Burp Suite Professional

Burp Suite Professional is a widely-used tool for web security professionals and penetration testers. It facilitates det...

Vulnerability Scanner Web Security Pentesting Appsec

9.2 Excellent

3

Cobalt Strike

Cobalt Strike is a powerful security software tool designed for penetration testing and red team exercises. It allows or...

Pentest Adversary Simulation Red Team Fortra

9.1 Excellent

4

Wiz Cloud Security Platform

The Wiz Cloud Security Platform provides enterprise-level protection for cloud environments. It uses agentless scanning...

Enterprise Cloud Security Agentless Cspm

9.0 Excellent

5

Metasploit Pro

Metasploit Pro is a security software platform designed for professional penetration testers and security analysts. It p...

Penetration Testing Offensive Rapid7 Exploit Framework

8.9 Great

6

Dragos Platform

The Dragos Platform is a security software solution specializing in protecting industrial control systems and operationa...

Industrial 2010S Ot Security Ics

8.9 Great

7

Shodan

Shodan is a search engine specializing in identifying internet-connected devices. It catalogs publicly accessible server...

IOT Asset Discovery Osint Internet Scanner

8.9 Great

8

Tenable Nessus

Tenable Nessus is a widely-used security software solution designed to identify vulnerabilities within IT environments....

Enterprise Compliance Vulnerability Scanner Assessment

8.8 Great

9

Cisco Duo

Cisco Duo is a security software platform providing multi-factor authentication (MFA). It enhances identity security by...

Zero Trust Cisco Identity Security Mfa

8.8 Great

10

Suricata

Suricata is an open source network security software solution. It analyzes incoming network traffic through deep packet...

Open Source Network Intrusion Detection 2010S

8.8 Great

11

Snyk Developer Security Platform

Snyk Developer Security Platform provides automated vulnerability scanning and remediation for applications built with p...

Cloud Native Developer Sca Sast

8.2 Great

12

Veracode Static Analysis

Veracode Static Analysis automatically scans application source code for known vulnerabilities like SQL injection and cr...

Enterprise Sast Appsec Veracode

8.1 Great

13

Checkmarx SAST

Checkmarx SAST analyzes source code for potential vulnerabilities by identifying patterns associated with common softwar...

Enterprise Devsecops Sast Appsec

8.1 Great

14

ModSecurity

ModSecurity is an open-source web application firewall (WAF) that analyzes HTTP traffic in real-time, detecting and bloc...

Open Source Waf Web Security Appsec

7.8 Good

15

SecurityScorecard

SecurityScorecard analyzes internet-facing assets to provide continuous vulnerability assessments and risk scores for or...

Supply Chain Risk Third Party Risk Security Ratings

7.8 Good

16

Qualys Web Application Scanning

Qualys Web Application Scanning automatically identifies vulnerabilities in web applications by testing them against kno...

Cloud Web Security Dast Appsec

7.5 Good

17

Sonatype Nexus Lifecycle

Sonatype Nexus Lifecycle is an open-source repository manager that automates the management of software artifacts across...

Supply Chain DEVOPS Sca Appsec

7.4 Good

18

Rapid7 InsightAppSec

Rapid7 InsightAppSec is a web application vulnerability scanner that performs continuous assessments of applications thr...

Web App Dast Appsec Rapid7

7.1 Good

19

Mend SCA

Mend SCA continuously monitors software supply chains for vulnerabilities and misconfigurations across open-source compo...

Open Source Devsecops Sca Mend

6.9 Fair

20

HCL AppScan

HCL AppScan is a dynamic application security testing (DAST) tool that automatically scans web applications and APIs for...

Enterprise Hcl Dast Sast

6.6 Fair