A Burp Suite content discovery plugin that adds smart functionality to the Buster plugin.
Best Application Security Tools — page 3
Compare 235 Application Security tools — 182 free, 0 freemium and 53 paid options, ranked by the security community. Find the right application security tool for your team.
235 tools
A lightweight web security auditing toolkit that simplifies security tasks and enhances productivity.
A tool for detecting capabilities in executable files, providing insights into a program's behavior and potential malicious activities.
An API security platform that combines discovery, compliance monitoring, and protection capabilities to defend against API attacks, automated threats, and data exposure.
Utility for comparing control flow graph signatures to Android methods with scanning capabilities for malicious applications.
CFRipper is a Library and CLI security analyzer for AWS CloudFormation templates.
A cloud-native web application and API security solution that uses contextual AI to protect against known and zero-day threats without signature-based detection.
Checkmarx One SAST is a static application security testing tool that combines speed and security to improve developer experience.
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Static code analysis tool for infrastructure as code (IaC) and software composition analysis (SCA) with over 1000 built-in policies for AWS, Azure, and Google Cloud.
An API security and monitoring platform that automatically discovers, validates, and protects API endpoints while providing comprehensive management and analytics capabilities.
Identifies misconfigured CloudFront domains vulnerable to hijacking
A python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
A developer-first, API-driven platform that provides development teams with a suite of tools to improve code quality, security, and engineering performance, seamlessly integrated into their…
A script that implements Cognito attacks such as Account Oracle or Priviledge Escalation
ConDroid performs concolic execution of Android apps to observe 'interesting' behavior in dynamic analysis.
A tool for identifying potential security vulnerabilities in dependency configurations by checking for lingering free namespaces for private package names.
The Contrast Runtime Security Platform is a suite of application security tools that integrates security into the software development lifecycle and production environments, including IAST…
An Application Security Posture Management platform that helps organizations integrate security throughout the software development lifecycle with a focus on vulnerability management and se…
A tool to scan for CORS misconfigurations in web applications
A plugin for viewing, detecting weak configurations, and generating Content Security Policy headers.
Curiefense is an application security platform that protects against various threats and offers community involvement.
cwe_checker is a suite of checks to detect common bug classes in ELF binaries using Ghidra for firmware analysis.
A browser with XSS detection capabilities
Load more tools
Showing 72 of 235