A brute-force protection middleware for express routes that rate-limits incoming requests.
Best Application Security Tools — page 5
Compare 235 Application Security tools — 182 free, 0 freemium and 53 paid options, ranked by the security community. Find the right application security tool for your team.
235 tools
A SaaS-based web application firewall that combines signature and behavioral-based threat detection to protect applications deployed across cloud, on-premises and edge environments.
Falco is a cloud native runtime security tool for Linux operating systems that detects and alerts on abnormal behavior and potential security threats in real-time.
ffufai is an AI-enhanced wrapper for ffuf that automatically suggests file extensions for web fuzzing based on the target URL and headers.
FingerprintJS is a client-side browser fingerprinting library that provides a unique visitor identifier unaffected by incognito mode.
Firejail is a SUID sandbox program for restricting the running environment of untrusted applications on Linux.
A series of levels teaching about common mistakes and gotchas when using Amazon Web Services (AWS).
FlowDroid is a context-, flow-, field-, object-sensitive and lifecycle-aware static taint analysis tool for Android applications.
An application security testing platform that combines automated scanning, AI assistance, and manual expert testing to provide continuous security assessment throughout the software develop…
A security analysis platform that combines SAST, SCA, SBOM generation and AI-assisted remediation to detect and fix vulnerabilities during the software development lifecycle.
Fnord is a pattern extractor for obfuscated code that extracts byte sequences and creates statistics, as well as generates experimental YARA rules.
Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.
An AI-powered application security platform that provides automated discovery, testing, and continuous monitoring of applications and APIs with minimal operational impact.
Prevents you from committing passwords and other sensitive information to a git repository.
Gitleaks is a SAST tool for detecting and preventing hardcoded secrets in git repos.
A fast and minimal JS endpoint extractor
A Java API for searching and downloading Android applications from Google Play with additional check-in features for generating ANDROID-ID.
Search engine for open-source Git repositories with advanced features like case sensitivity and regular expressions.
Hackazon is a free, vulnerable test site with an online storefront to train and test IT security professionals on various vulnerabilities like SQL Injection and cross-site scripting.
A Windows Kernel driver intentionally vulnerable to help improve skills in kernel-level exploitation.
A simple, secure framework for building scalable applications
A security-focused general purpose memory allocator providing the malloc API with hardening against heap corruption vulnerabilities.
A tool for automated HTTP header injection
An application security platform that provides runtime threat modeling, vulnerability management, and automated remediation workflows with a focus on identifying exploitable vulnerabilities…
Load more tools
Showing 120 of 235