Skip to content
THREATWIRE

Open Source Tools · Category

Vulnerability scanning

Scanners that check hosts, services and applications against known vulnerabilities and misconfigurations, plus platforms that track the findings.

Alternatives toQualys VMDRTenable Nessus

8 tools

  • Nuclei

    Template-based vulnerability scanner

    Fast vulnerability scanner driven by YAML templates, with thousands of community templates for CVEs, misconfigurations and exposures across many protocols.

    Stars
    32k
    Forks
    4k
    Last commit
    today
    MITOpen sourceVulnerability scanning
    Alternative toTenable NessusQualys VMDR+1

  • ZAP

    Intercepting proxy and DAST scanner for web apps

    Web application security scanner and intercepting proxy, formerly OWASP ZAP, with automated scans, a desktop UI, an API and a large add-on marketplace.

    Stars
    16k
    Forks
    2.7k
    Last commit
    4 days ago
    Apache-2.0Open sourceWeb application testing
    Alternative toBurp Suite ProfessionalAcunetix

  • Nmap

    Network discovery and security auditing tool

    The Network Mapper: host discovery, port scanning, service and OS detection, and the Nmap Scripting Engine (NSE) for further checks.

    Stars
    14k
    Forks
    2.9k
    Last commit
    today
    NPSL-0.95Source-availableNetwork scanning and analysis

  • Nikto

    Web server scanner for dangerous files and misconfigurations

    Long-running open-source web server scanner that checks for dangerous files, outdated server software and common misconfigurations.

    Stars
    11k
    Forks
    1.5k
    Last commit
    2 months ago
    GPL-3.0-onlyOpen sourceVulnerability scanning
    Alternative toAcunetix

  • DefectDojo

    Vulnerability management and DevSecOps findings platform

    Web platform that imports findings from many security scanners, deduplicates them and tracks remediation across products and engagements.

    Stars
    5k
    Forks
    2k
    Last commit
    today
    BSD-3-ClauseOpen sourceVulnerability scanning
    Alternative toQualys VMDR

  • OpenVAS (Greenbone)

    Network vulnerability scanner (Greenbone Community Edition)

    Scanner engine of the Greenbone Community Edition, running network vulnerability tests from the Greenbone community feed against hosts and services.

    Stars
    4.9k
    Forks
    805
    Last commit
    today
    GPL-2.0-onlyOpen sourceVulnerability scanning
    Alternative toTenable NessusQualys VMDR