Vulnerability Analysis

Finds and verifies leaked secrets (API keys, tokens) in Git repos, S3, Docker and more.

NVIDIA's LLM vulnerability scanner: prompt injection, jailbreaks, data leakage.

The reference wordlist collection: usernames, passwords, URLs, fuzzing payloads and more.

Lightweight, modern web auditing proxy and Burp Suite alternative. Free plan available.

The worlds most famous network scanner. Discovers hosts, services and vulnerabilities with NSE scripts.

Vulnerability scanner for containers, filesystems and cloud configurations.

Lightweight and fast static code analyzer. Finds bugs and security vulnerabilities.

Free and open source web security scanner. Alternative to Burp Suite with CI/CD integration.

The worlds most used vulnerability scanner. Detects outdated software and missing patches.

Open source vulnerability scanner. Free alternative to Nessus with frequent updates.

WordPress vulnerability scanner. Detects vulnerable plugins and insecure configurations.

The standard toolkit for web application security testing. Intercepting proxy and automated scanner.

Template-based vulnerability scanner. Fast and highly customizable for bug bounty.

Detects credentials and secrets in Git history. Ideal for CI/CD and pre-commit hooks.

Fast, recursive web content discovery tool written in Rust.

Finds hidden HTTP parameters on web endpoints. Great for expanding attack surface.

The worlds fastest port scanner. Can scan the entire Internet in under 6 minutes.

Modern port scanner written in Rust. Extremely fast with Nmap integration.

Web server scanner that looks for dangerous files, outdated versions and specific problems.