0

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categories Blog & research About us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links.

Our commitment

Independent research methodology

Our researchers use a mix of verified reviews, independent research, and objective methodologies to bring you selection and ranking information you can trust. While we may earn a referral fee when you visit a provider through our links or speak to an advisor, this has no influence on our research or methodology.

Verified user reviews

GetApp maintains a proprietary database of millions of in-depth, verified user reviews across thousands of products in hundreds of software categories. Our data scientists apply advanced modeling techniques to identify key insights about products based on those reviews. We may also share aggregated ratings and select excerpts from those reviews throughout our site.

Our human moderators verify that reviewers are real people and that reviews are authentic. They use leading tech to analyze text quality and to detect plagiarism and generative AI.

How GetApp ensures transparency

GetApp lists all providers across its website—not just those that pay us—so that users can make informed purchase decisions. GetApp is free for users. Software providers pay us for sponsored profiles to receive web traffic and sales opportunities. Sponsored profiles include a link-out icon that takes users to the provider’s website.

Penetration Testing
Github

Top Rated Penetration Testing Software with Github

Last updated: September 2026

1 filter applied

Features

No filters available

Integrated with

GitHub

Slack

Jira

Pricing model

Free

Open Source

Free Trial

One Time License

Subscription

Devices supported

Android

Chromebook

iPad

iPhone

Linux

Mac

Web-based

Windows

Organization types

Freelancers

Large Enterprises

Mid Size Business

Non Profit

Public Administrations

Small Business

User rating

All Reviews

& up

& up

& up

15 software options

Sort by

Sponsored

Astra Pentest

4.8

(12)

5

10

4

2

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Continuous Pentests (VAPT) that scales with your dev velocit

AI Powered offensive Pentest Platform

Read more about Astra Pentest

Users also considered

Xora

4.8

(4)

5

3

4

1

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

AppSec isn't a one-time event, Pentests shouldn't be either

Imagine a solution that actually found and fixed security issues within code before it ever shipped?

Xora is modern code security for the AI era. It bridges the gap from "found" to "fixed and verified" so that security leaders can sleep at night knowing their application is secure.

Read more about Xora

Users also considered

Pentest-Tools.com

4.5

(2)

5

1

4

1

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Discover what's possible. Prove what's real.

From vulnerability scans to proof, Pentest-Tools.com gives 2,000+ security teams in 119 countries the speed, accuracy, and coverage to confidently validate and mitigate risks across their infrastructure (network, cloud, web apps, APIs).

Read more about Pentest-Tools.com

Users also considered

Invicti

4.7

(26)

5

19

4

5

3

2

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Proof-based application security testing platform

Invicti is a web application and API security platform that provides proof-based vulnerability scanning with DAST, SAST, and ASPM capabilities. The platform discovers and tests websites, applications, and APIs while correlating security findings from multiple tools to prioritize real vulnerabilities. It integrates with CI/CD pipelines and offers AI-powered remediation guidance to help development teams address security issues efficiently.

Read more about Invicti

Users also considered

HackerOne

4.6

(12)

5

8

4

3

3

1

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Cybersecurity platform to identify and fix vulnerabilities

HackerOne is a web-based cybersecurity platform designed to help businesses across various industry verticals such as education, telecom, aviation, media, financial services, and more eliminate vulnerabilities by securing continuous development processes.

Read more about HackerOne

Users also considered

Acunetix

4.4

(35)

5

20

4

10

3

4

2

1

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Cloud-based and automated web application security solution

Acunetix is a cybersecurity solution offering automatic web security testing technology that enables organizations to scan and audit complex, authenticated, HTML5 and JavaScript-heavy websites to detect vulnerabilities such as XSS, SQL Injection, and more.

Read more about Acunetix

Users also considered

Strobes PTaaS

(0)

Continuous and On-Demand Pentesting Platform

Strobes PTaaS is a cloud-based and on-premise vulnerability scanner that is designed for businesses in banking, network security, healthcare, telecommunications, and other sectors. Platform-enabled pentesting from the best white hats gives you faster collaboration and better results. By transitioning from ad-hoc penetration testing to continuous, on-demand pentesting, you will be able to level up your delivery.

Read more about Strobes PTaaS

Users also considered

Gordon VAPT

(0)

Automated vuln scanning & penetration testing

Gordon VAPT is a vulnerability assessment and penetration testing platform that combines continuous automated scanning with expert-led security testing. The solution performs automated vulnerability detection across web applications, APIs, cloud infrastructure, network devices, and endpoints using DAST, SAST, and SCA scanning methods. It includes manual penetration testing conducted by CERT-In empanelled security researchers who validate findings and test for business logic flaws.

Read more about Gordon VAPT

Users also considered

Sn1per

(0)

Get an attacker’s view of your organization!

Introducing Sn1per Professional – the leading security scanning solution to discover hidden vulnerabilities and assets in your environment.

Read more about Sn1per

Users also considered

Blacklock

(0)

Cybersecurity testing and monitoring platform

BlackLock offers a Penetration Testing as a Service (PTaaS) platform combining automated vulnerability scanning with CREST-certified manual testing. It features continuous security monitoring, vulnerability orchestration via a dashboard, and integration with development workflows for DevSecOps. BlackLock provides actionable reports for various audiences and AI-enabled remediation assistance for vulnerabilities.

Read more about Blacklock

Users also considered

TurboPentest

(0)

Blockchain-attested collaborative agentic pentesting

TurboPentest delivers agentic AI penetration testing powered by P4L4D1N AI. Up to 20 autonomous agents orchestrate 15 tools including Nmap, OWASP ZAP, Nuclei, Semgrep, Trivy, OpenVAS. PDF report, blockchain attestation, attack surface map, threat model. Results in up to 4 hours. From $99/target.

Read more about TurboPentest

Users also considered

Beagle Security

4.9

(51)

5

44

4

7

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Secure your web apps & APIs from the latest vulnerabilities

Beagle Security helps you to identify security weaknesses and vulnerabilities on your web apps & APIs before hackers harm you in any way.

Read more about Beagle Security

Users also considered

Cobalt

4.5

(2)

5

1

4

1

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

(previously CrowdCurity) Pen Testing as a Service

Cobalt - previously CrowdCurity - is a modern application security platform that supports a complete find-to-fix workflow for all penetration testing and vulnerability assessments throughout an organization

Read more about Cobalt

Users also considered

YesWeHack

(0)

Offensive Security & Exposure Management Platform

YesWeHack is a leading Offensive Security and Exposure Management platform delivering integrated, API-based solutions to secure organisations’ growing attack surfaces. Its human-in-the-loop model combines Bug Bounty, Autonomous Pentesting, Continuous Pentesting and unified vulnerability management.

Read more about YesWeHack

Users also considered

Akto

(0)

API Security Platform for Modern Appsec teams

Akto is an industry-leading solution for API discovery, API security posture management, sensitive data exposure, API security testing.

Read more about Akto

Users also considered

Related categories

Automated Testing

Application Performance Management

Application Lifecycle Management

Performance Testing

Test Management Tools

GetApp

100 S. Wacker Dr.
Ste. 600
Chicago, IL 60606
USA

For you

Join Sign in Software categories Blog & research

For vendors

Get listed Your account

Our company

About us Careers News Legal Privacy Policy

© 2010-2026 GetApp. All Rights Reserved.
GetApp is a registered trademark of Nubera eBusiness S.L. Nubera eBusiness uses its own and third-party cookies. By using the website you are accepting the use of these cookies. To get more information about our cookies click here.