swap_horiz Qualys Web Application Scanning Alternatives

1

OWASP ZAP

OWASP ZAP is a free, open-source web proxy scanner designed to identify vulnerabilities in web applications. It operates...

Security Open Source Proxy Scanner

9.4 Excellent

2

Wireshark

Wireshark is an open source packet analyzer primarily utilized for network forensics and security analysis. It captures...

Open Source Packet Analysis 1990S Network Forensics

9.4 Excellent

3

PortSwigger Burp Suite Professional

Burp Suite Professional is a widely-used tool for web security professionals and penetration testers. It facilitates det...

Vulnerability Scanner Web Security Pentesting Appsec

9.2 Excellent

4

Cobalt Strike

Cobalt Strike is a powerful security software tool designed for penetration testing and red team exercises. It allows or...

Pentest Adversary Simulation Red Team Fortra

9.1 Excellent

5

Wiz Cloud Security Platform

The Wiz Cloud Security Platform provides enterprise-level protection for cloud environments. It uses agentless scanning...

Enterprise Cloud Security Agentless Cspm

9.0 Excellent

6

Metasploit Pro

Metasploit Pro is a security software platform designed for professional penetration testers and security analysts. It p...

Penetration Testing Offensive Rapid7 Exploit Framework

8.9 Great

7

Dragos Platform

The Dragos Platform is a security software solution specializing in protecting industrial control systems and operationa...

Industrial 2010S Ot Security Ics

8.9 Great

8

Snyk Developer Security Platform

Snyk Developer Security Platform provides automated vulnerability scanning and remediation for applications built with p...

Cloud Native Developer Sca Sast

8.2 Great

9

McAfee Web Protection

McAfee Web Protection is a web content filtering solution that blocks malicious websites and provides real-time threat i...

Security Enterprise Real Time Firewall

8.1 Great

10

Veracode Static Analysis

Veracode Static Analysis automatically scans application source code for known vulnerabilities like SQL injection and cr...

Enterprise Sast Appsec Veracode

8.1 Great

11

Checkmarx SAST

Checkmarx SAST analyzes source code for potential vulnerabilities by identifying patterns associated with common softwar...

Enterprise Devsecops Sast Appsec

8.1 Great

12

Qualys VMDR

Qualys VMDR is a cloud-based vulnerability management platform that continuously scans endpoints for vulnerabilities, as...

Cloud Enterprise Vulnerability Management Qualys

7.8 Good

13

Black Duck SCA

Black Duck Software’s SCA Analyzer automatically identifies and manages open-source components within software projects,...

Open Source Supply Chain Sca Appsec

7.8 Good

14

ModSecurity

ModSecurity is an open-source web application firewall (WAF) that analyzes HTTP traffic in real-time, detecting and bloc...

Open Source Waf Web Security Appsec

7.8 Good

15

Invicti Web Application Security Scanner

Invicti Web Application Security Scanner automatically discovers and analyzes web application vulnerabilities by verifyi...

Enterprise Vulnerability Scanner Web Security Dast

7.6 Good

16

Imperva WAF

Imperva WAF is a web application firewall that analyzes incoming HTTP/HTTPS traffic to identify and block malicious requ...

Enterprise Waf Ddos Protection Web Security

7.4 Good

17

Sonatype Nexus Lifecycle

Sonatype Nexus Lifecycle is an open-source repository manager that automates the management of software artifacts across...

Supply Chain DEVOPS Sca Appsec

7.4 Good

18

Qualys Policy Compliance

Qualys Policy Compliance continuously assesses IT infrastructure and applications against pre-defined security policies,...

Cloud Compliance Configuration Qualys

7.4 Good

19

Rapid7 InsightAppSec

Rapid7 InsightAppSec is a web application vulnerability scanner that performs continuous assessments of applications thr...

Web App Dast Appsec Rapid7

7.1 Good

20

HCL AppScan

HCL AppScan is a dynamic application security testing (DAST) tool that automatically scans web applications and APIs for...

Enterprise Hcl Dast Sast

6.6 Fair