swap_horiz Black Duck SCA Alternatives

1

Wireshark

Wireshark is an open source packet analyzer primarily utilized for network forensics and security analysis. It captures...

Open Source Packet Analysis 1990S Network Forensics

9.4 Excellent

2

PortSwigger Burp Suite Professional

Burp Suite Professional is a widely-used tool for web security professionals and penetration testers. It facilitates det...

Vulnerability Scanner Web Security Pentesting Appsec

9.2 Excellent

3

Cobalt Strike

Cobalt Strike is a powerful security software tool designed for penetration testing and red team exercises. It allows or...

Pentest Adversary Simulation Red Team Fortra

9.1 Excellent

4

Wiz Cloud Security Platform

Wiz Cloud Security Platform analyzes network traffic in real-time to detect and prevent sophisticated threats like ranso...

Enterprise Cloud Security Agentless Cspm

9.0 Excellent

5

Metasploit Pro

Metasploit Pro is a commercial penetration testing framework offering a comprehensive suite of tools and modules for vul...

Penetration Testing Offensive Rapid7 Exploit Framework

8.9 Great

6

Dragos Platform

The Dragos Platform is a comprehensive threat intelligence and detection system that analyzes industrial control systems...

Industrial 2010S Ot Security Ics

8.9 Great

7

Shodan

Shodan is a search engine that indexes internet-connected devices – including servers, routers, and industrial control s...

IOT Asset Discovery Osint Internet Scanner

8.9 Great

8

Tenable Nessus

Tenable Nessus is a vulnerability scanner that identifies weaknesses in systems and applications by analyzing configurat...

Enterprise Compliance Vulnerability Scanner Assessment

8.8 Great

9

Cisco Duo

Cisco Duo Security offers multi-factor authentication (MFA) solutions that verify user identities using multiple methods...

Zero Trust Cisco Identity Security Mfa

8.8 Great

10

Snyk Developer Security Platform

Snyk Developer Security Platform provides automated vulnerability scanning and remediation for applications built with p...

Cloud Native Developer Sca Sast

8.2 Great

11

Veracode Static Analysis

Veracode Static Analysis automatically scans application source code for known vulnerabilities like SQL injection and cr...

Enterprise Sast Appsec Veracode

8.1 Great

12

Checkmarx SAST

Checkmarx SAST analyzes source code for potential vulnerabilities by identifying patterns associated with common softwar...

Enterprise Devsecops Sast Appsec

8.1 Great

13

ModSecurity

ModSecurity is an open-source web application firewall (WAF) that analyzes HTTP traffic in real-time, detecting and bloc...

Open Source Waf Web Security Appsec

7.8 Good

14

SecurityScorecard

SecurityScorecard analyzes internet-facing assets to provide continuous vulnerability assessments and risk scores for or...

Supply Chain Risk Third Party Risk Security Ratings

7.8 Good

15

Qualys Web Application Scanning

Qualys Web Application Scanning automatically identifies vulnerabilities in web applications by testing them against kno...

Cloud Web Security Dast Appsec

7.5 Good

16

Sonatype Nexus Lifecycle

Sonatype Nexus Lifecycle is an open-source repository manager that automates the management of software artifacts across...

Supply Chain DEVOPS Sca Appsec

7.4 Good

17

Contrast Security

Contrast Security is a runtime protection platform that utilizes behavioral analysis and machine learning to detect and...

Developer Appsec Iast Rasp

7.3 Good

18

Rapid7 InsightAppSec

Rapid7 InsightAppSec is a web application vulnerability scanner that performs continuous assessments of applications thr...

Web App Dast Appsec Rapid7

7.1 Good

19

Mend SCA

Mend SCA continuously monitors software supply chains for vulnerabilities and misconfigurations across open-source compo...

Open Source Devsecops Sca Mend

6.9 Fair

20

HCL AppScan

HCL AppScan is a dynamic application security testing (DAST) tool that automatically scans web applications and APIs for...

Enterprise Hcl Dast Sast

6.6 Fair