Deliberately vulnerable web application for educational purposes.
Best Application Security Tools — page 4
Compare 235 Application Security tools — 182 free, 0 freemium and 53 paid options, ranked by the security community. Find the right application security tool for your team.
235 tools
A deliberately weak and insecure implementation of GraphQL for testing and practicing GraphQL security
A PHP/MySQL web application designed to aid security professionals in testing their skills and tools in a legal environment.
An insecure web application with multiple vulnerable web service components for learning real-world web service vulnerabilities.
A deliberately vulnerable modern day app with lots of DOM related bugs
An application security platform that combines API discovery, multiple security testing methodologies, and continuous monitoring to protect modern applications throughout their development…
DECAF++ is a fast whole-system dynamic taint analysis framework with improved performance and elasticity.
An integrated application security platform that combines software composition analysis, container scanning, and runtime security monitoring to identify and prioritize vulnerabilities based…
An open-source modern Dependency Walker for Windows developers.
Open-Source framework for detecting and preventing dependency confusion leakage with a holistic approach and wide technology support.
DerScanner is a comprehensive application security testing platform that combines SAST, DAST, MAST, SCA, and Binary Analysis capabilities with support for on-premises deployment and CI/CD i…
A web-based tool for instrumenting and analyzing Android applications using Flask, Jinja, and Redis.
A fake Django admin login screen to detect and notify admins of attempted unauthorized access
DOMPurify is a fast XSS sanitizer for HTML, MathML, and SVG.
A free online tool to scan for DOM-based XSS vulnerabilities in HTML, JavaScript, and CSS files.
Drltrace is a dynamic API calls tracer for Windows and Linux applications.
Instrumentation-based approach for resolving reflective calls in Android apps.
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
DVTA is a Vulnerable Thick Client Application with various security vulnerabilities.
Cutting-edge technology for developing security applications within the Linux kernel.
A honeypot trap for Symfony2 forms to reduce spam submissions.
An agentless API security platform that discovers, tests, and secures APIs through source code analysis without requiring traffic monitoring.
ESLint plugin to prevent Trojan Source attacks.
EvoMaster is an open-source tool that automatically generates system-level test cases for web APIs using AI-driven techniques.
Load more tools
Showing 96 of 235