getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Penetration Testing Software - Page 2

Last updated: November 2026

Filter results

Features

No filters available


Integrated with


Pricing model


Devices supported


Organization types


User rating


61 software options

Invicti Web + API (formerly Acunetix) logo

Cloud-based and automated web application security solution

learn more
Acunetix is a cybersecurity solution offering automatic web security testing technology that enables organizations to scan and audit complex, authenticated, HTML5 and JavaScript-heavy websites to detect vulnerabilities such as XSS, SQL Injection, and more.

Read more about Invicti Web + API (formerly Acunetix)

Users also considered
Vector logo

AI-driven pen testing for web applications

learn more
Vector is an AI-powered penetration testing tool that automates blackbox and whitebox security testing for web applications. It executes multi-wave exploit chains for SQL injection, XSS, authentication, and access control, using isolated virtual machines with browser automation. Vector delivers validated findings, working exploits, proof-of-concept demos, reproduction steps, and generated code fixes for vulnerabilities.

Read more about Vector

Users also considered
Strobes PTaaS logo

Continuous and On-Demand Pentesting Platform

learn more
Strobes PTaaS is a cloud-based and on-premise vulnerability scanner that is designed for businesses in banking, network security, healthcare, telecommunications, and other sectors. Platform-enabled pentesting from the best white hats gives you faster collaboration and better results. By transitioning from ad-hoc penetration testing to continuous, on-demand pentesting, you will be able to level up your delivery.

Read more about Strobes PTaaS

Users also considered
NoneCap logo

Cloud hCaptcha solver API for dev teams

learn more
Cloud-hosted hCaptcha solver API returning real tokens via REST, SDKs, or Chrome extension for developers and automation teams.

Read more about NoneCap

Users also considered
Cyber Decision Lab logo

Free cybersecurity preparedness and privacy tools

learn more
Seven free browser tools for IT outage records, incident checklists, tabletop exercise planning and privacy checks.

Read more about Cyber Decision Lab

Users also considered
Gordon VAPT logo

Automated vuln scanning & penetration testing

learn more
Gordon VAPT is a vulnerability assessment and penetration testing platform that combines continuous automated scanning with expert-led security testing. The solution performs automated vulnerability detection across web applications, APIs, cloud infrastructure, network devices, and endpoints using DAST, SAST, and SCA scanning methods. It includes manual penetration testing conducted by CERT-In empanelled security researchers who validate findings and test for business logic flaws.

Read more about Gordon VAPT

Users also considered
BugDazz API Scanner logo

Automated API vulnerability detection platform

learn more
BugDazz API Security Scanner provides automated vulnerability detection for API endpoints with comprehensive OWASP Top 10 coverage. The platform integrates seamlessly with CI/CD pipelines, offering real-time scanning capabilities and detailed reporting in multiple formats. Organizations can benefit from its customizable templates, advanced user management features, and compliance assistance for regulatory standards while maintaining robust security across high volumes of APIs.

Read more about BugDazz API Scanner

Users also considered
Sn1per logo

Get an attacker’s view of your organization!

learn more
Introducing Sn1per Professional – the leading security scanning solution to discover hidden vulnerabilities and assets in your environment.

Read more about Sn1per

Users also considered
Blacklock logo

AI-Powered Penetration Testing & Vulnerability Management

learn more
Blacklock is an AI-powered PTaaS and vulnerability management platform combining continuous security scanning, expert penetration testing, SAST, SBOM, and automated vulnerability validation. Integrate security testing into development workflows, prioritise risks, and accelerate remediation.

Read more about Blacklock

Users also considered
TurboPentest logo

Blockchain-attested collaborative agentic pentesting

learn more
TurboPentest delivers agentic AI penetration testing powered by P4L4D1N AI. Up to 20 autonomous agents orchestrate 15 tools including Nmap, OWASP ZAP, Nuclei, Semgrep, Trivy, OpenVAS. PDF report, blockchain attestation, attack surface map, threat model. Results in up to 4 hours. From $99/target.

Read more about TurboPentest

Users also considered
Keybrum logo

Business software solution

learn more
Keybrum is a business software solution designed to support organizations in managing core operational workflows.

Read more about Keybrum

Users also considered
Impactr logo

Business impact tracking and reporting software

learn more
Impactr is a business impact tracking and reporting tool designed to help organizations measure, manage, and communicate outcomes.

Read more about Impactr

Users also considered
Nexus Void logo

Continuous security testing for engineering-led teams

learn more
Nexus Void delivers continuous security verification, adversary simulation, and compliance evidence for small and mid-sized.

Read more about Nexus Void

Users also considered
Cyver Core logo

Cloud-based penetration testing platform

learn more
Cyver delivers pentest management-as-a-service, through a cloud platform. It offers automation, digitization, client management, and findings management to improve customer satisfaction and the quality of delivered reports.

Read more about Cyver Core

Users also considered
Novee logo

AI-powered penetration testing platform

learn more
Novee provides AI-powered penetration testing software that continuously identifies vulnerabilities and exploit chains in live environments. The platform uses AI agents to map systems, detect business logic flaws, and validate security issues with clear replication steps. It offers personalized remediation guidance tailored to specific architectures and automatically retests after fixes are implemented.

Read more about Novee

Users also considered
Affordable Pentesting logo

AI pentesting with audit-ready reports in 48 hours

learn more
Self-serve penetration testing that pairs AI testing agents with certified ethical hackers. Covers external IPs, web apps, APIs, cloud, Microsoft 365 and WiFi. Audit-ready reports map to SOC 2, HIPAA, PCI DSS, ISO 27001 and NIST, delivered in 48 hours. Per-test pricing from $199, no subscription.

Read more about Affordable Pentesting

Users also considered
learn more
Users also considered
YesWeHack logo

Offensive Security & Exposure Management Platform

learn more
YesWeHack is a leading Offensive Security and Exposure Management platform delivering integrated, API-based solutions to secure organisations’ growing attack surfaces. Its human-in-the-loop model combines Bug Bounty, Autonomous Pentesting, Continuous Pentesting and unified vulnerability management.

Read more about YesWeHack

Users also considered
Bendings Gauge logo

Sheet metal bending calculation software

learn more
Bendings Gauge is a sheet metal bending calculation tool designed to support fabrication professionals with gauge and bend allowance.

Read more about Bendings Gauge

Users also considered
ComplyArmor logo

Cloud PTaaS for apps, APIs, AI agents & networks

learn more
Cloud-based PTaaS platform delivering continuous, human-verified penetration testing across web, mobile, API, and network assets.

Read more about ComplyArmor

Users also considered
CovertThreat Offensive Security Intelligence Platform logo

Cloud-based offensive security platform for enterprises

learn more
Cloud-based enterprise cybersecurity platform with offensive security testing, continuous risk visibility, and compliance management.

Read more about CovertThreat Offensive Security Intelligence Platform

Users also considered
PentestPad logo

Pen testing report & collaboration platform

learn more
PentestPad is a penetration testing reporting platform that automates report generation using branded templates and integrates with over 20 security tools. It includes project tracking with calendar overviews, vulnerability management, and retesting to validate fixes. PentestPad offers team collaboration, client whitelabel access for secure progress viewing, and deployment options via self-hosted or cloud environments.

Read more about PentestPad

Users also considered
Ostorlab logo

Cloud-based vulnerability management platform

learn more
Ostorlab is a cloud-based vulnerability management platform designed to help businesses detect, monitor, and remediate risks across enterprises' external attack surfaces.

Read more about Ostorlab

Users also considered
Reflectiz logo

Digital Security for Websites

learn more
Reflectiz empowers businesses to make web applications safer by mitigating their digital risks without any website impact.

Read more about Reflectiz

Users also considered
Cyberlop logo

Cloud-based web app & API pen testing platform

learn more
Cloud-based web app and API penetration testing platform for security agencies and product teams, covering black-box, gray-box, and.

Read more about Cyberlop

Users also considered