A comprehensive database of exploits and vulnerabilities for researchers and professionals
Best Vulnerability Management Tools
Compare 179 Vulnerability Management tools — 169 free, 1 freemium and 9 paid options, ranked by the security community. Find the right vulnerability management tool for your team.
179 tools
A tool that automatically audits website security by crawling an entire website and identifying vulnerabilities
A demonstration site for the Acunetix Web Vulnerability Scanner, featuring intentionally vulnerable PHP code to test web application security.
A demonstration site for the Acunetix Web Vulnerability Scanner, intentionally vulnerable to various web-based attacks.
Weekly security newsletter with advisories from major software vendors
A tool for scanning Adobe Experience Manager instances for potential security vulnerabilities
A GitHub App that monitors GitHub organizations or repositories for adherence to security best practices and detects policy violations.
Amass by OWASP performs comprehensive attack surface mapping and asset discovery.
Command line interface for managing and inspecting images, policies, subscriptions, and registries with support for various operating systems and packages.
A tool that showcases the attack surface of a given Android device, highlighting potential vulnerabilities and security risks.
A comprehensive guide to Android Security
A collection of Ansible roles for hardening various systems and services
HTTP parameter discovery suite
Automate your reconnaissance process with AttackSurfaceMapper, a tool for mapping and analyzing network attack surfaces.
A tool to run YARA rules against node_module folders to identify suspicious scripts
Audits JavaScript projects for known vulnerabilities and outdated package versions using OSS Index v3 REST API.
A list of vulnerable applications for testing and learning
A collection of resources for securing AWS environments using the CIS Amazon Web Services Foundations Benchmark 1.1
A hosted web application security testing tool that enables security researchers to register, activate their accounts, and scan web applications for vulnerabilities.
A vulnerability assessment and management tool that uses patented technology to accurately identify vulnerabilities and prioritize them by risk.
An automated web application security scanner that evaluates JavaScript library vulnerabilities and HTTP security headers to assess website security posture.
Vulnerable web application for beginners in penetration testing.
A repository containing hourly-updated data dumps of bug bounty platform scopes
A categorized collection of bug bounty write-ups for various vulnerabilities.
Load more tools
Showing 24 of 179