Python-based web server framework for setting up fake web servers and services with precise data responses.
Best Application Security Tools — page 6
Compare 235 Application Security tools — 182 free, 0 freemium and 53 paid options, ranked by the security community. Find the right application security tool for your team.
235 tools
A web application firewall and API security platform that combines API discovery, runtime protection, vulnerability testing, and security posture management.
InQL is a Burp Suite extension for advanced GraphQL testing and vulnerability detection
Insider is a source code analysis tool focusing on OWASP Top 10 vulnerabilities with easy integration into DevOps pipelines.
Dynamic application security testing tool for identifying and fixing web application vulnerabilities.
A tool that uses Apache mod_rewrite to redirect invalid URIs to a specified URL
IronBee is an open source project building a universal web application security sensor.
This article discusses the different types of remote timing attacks and provides defense strategies against them.
Automated web application testing tool
Reformat and re-indent bookmarklets, ugly JavaScript, and unpack scripts with options available via UI.
JAADAS is a powerful tool for static analysis of Android applications, providing features like API misuse analysis and inter-procedure dataflow analysis.
Statistical renaming, Type inference, and Deobfuscation tool for JavaScript code.
Emulates browser functionality to detect exploits targeting browser vulnerabilities.
Kiterunner is a tool for lightning-fast traditional content discovery and bruteforcing API endpoints in modern applications.
Application security platform that combines SAST and SCA with runtime intelligence to validate vulnerability exploitability and provide contextual remediation guidance.
An API security platform that discovers, documents, and tests APIs throughout the development lifecycle while maintaining a centralized catalog of all API assets.
Lint lockfiles for improved security and trust policies.
Application monitoring and security platform that provides runtime visibility, threat detection, and automated response capabilities for application-layer security
SAST and malware analysis tool for Android APKs with detailed scan information.
A comprehensive mobile security testing framework offering static and dynamic analysis, API security testing, and malware analysis.
ModSecurity is an open-source web application firewall that provides a flexible and scalable way to monitor and control HTTP traffic.
A web security tool that scans for vulnerabilities and known attacks.
A third-party Nginx module that prevents common web attacks by reading a small subset of simple rules containing 99% of known patterns involved in website vulnerabilities.
Goof is a vulnerable Node.js demo application that includes a series of vulnerabilities and exploits
Load more tools
Showing 144 of 235