A next-generation web scanner that identifies websites and recognizes web technologies, including content management systems, blogging platforms, and more.
Best Application Security Tools — page 10
Compare 235 Application Security tools — 182 free, 0 freemium and 53 paid options, ranked by the security community. Find the right application security tool for your team.
235 tools
A static code analysis tool for parsing common data formats to detect hardcoded credentials and dangerous functions.
WordPress plugin to reduce comment spam with a smarter honeypot.
WPRecon is a tool for recognizing vulnerabilities and blackbox information for WordPress.
A centralized dashboard for running and scheduling WordPress scans powered by wpscan utility.
A comprehensive cheatsheet for XSS filter evasion techniques.
XSS Polyglot Challenge - XSS payload running in multiple contexts for testing XSS.
Hack with JavaScript XSS'OR tool for encoding/decoding and various XSS related functionalities.
Automatic tool for pentesting XSS attacks against different applications
A simple Swagger-ui scanner that detects old versions vulnerable to various XSS attacks
A web application designed to be 'Xtremely Vulnerable' for security enthusiasts to learn application security.
An ASPM platform that provides software supply chain security through risk assessment, prioritization, and protection mechanisms.
Embeddable Yara library for Java with support for loading rules and scanning data.
Yaramod is a library for parsing YARA rules into AST and building new YARA rulesets with C++ programming interface.
IDAPython plugin for generating Yara rules/patterns from x86/x86-64 code through parameterization.
YLS Language Server for YARA Language with comprehensive features and Python 3.8 support.
Yara Based Detection for web browsers
A popular free security tool for automatically finding security vulnerabilities in web applications
Akamai Client-Side Protection & Compliance is a security tool that monitors and protects against client-side threats on websites, aiding in PCI DSS v4.0 compliance.