getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Top Rated Vulnerability Scanner Software with Mid size business - Page 4

Last updated: November 2026

1 filter applied

Features


Integrated with


Pricing model


Devices supported


Organization types


User rating


112 software options

Gordon VAPT logo

Automated vuln scanning & penetration testing

learn more
VAPT platform that identifies, validates, and prioritizes vulnerabilities across web, API, cloud, and network environments using automated scanning and expert testing, with actionable remediation guidance and continuous monitoring to reduce risk.

Read more about Gordon VAPT

Users also considered
BugDazz API Scanner logo

Automated API vulnerability detection platform

learn more
BugDazz API Security Scanner provides automated vulnerability detection for API endpoints with comprehensive OWASP Top 10 coverage. The platform integrates seamlessly with CI/CD pipelines, offering real-time scanning capabilities and detailed reporting in multiple formats. Organizations can benefit from its customizable templates, advanced user management features, and compliance assistance for regulatory standards while maintaining robust security across high volumes of APIs.

Read more about BugDazz API Scanner

Users also considered
CrowdStrike Falcon Cloud Security logo

Cloud security platform from code to runtime

learn more
CrowdStrike Falcon Cloud Security provides unified protection across cloud environments from code to runtime. It combines agent-based and agentless approaches for real-time threat detection, cloud security posture management, and vulnerability management across multi-cloud infrastructures. Features include cloud workload protection, container and Kubernetes security, identity management, and application security posture monitoring with AI-driven insights.

Read more about CrowdStrike Falcon Cloud Security

Users also considered
Sn1per logo

Get an attacker’s view of your organization!

learn more
Introducing Sn1per Professional – the leading security scanning solution to discover hidden vulnerabilities and assets in your environment.

Read more about Sn1per

Users also considered
HTTPCS Security logo

Next-Gen Vulnerability Scanner for websites and web apps

learn more
HTTPCS Security protects your websites against hackers by detecting vulnerabilities that could be exploited and helping you to fix them.

Read more about HTTPCS Security

Users also considered
CVEFinder logo

Website scanner for CVEs and dependencies

learn more
CVEFinder.io is a vulnerability scanner that identifies known Common Vulnerabilities and Exposures and vulnerable dependencies on websites. The platform analyzes headers, HTML, JavaScript, and package.json files to detect technologies and npm packages with security issues. It provides single and bulk scanning capabilities, technology detection with confidence levels, and access to a database of over three hundred forty-three thousand CVEs across nearly two hundred thousand products.

Read more about CVEFinder

Users also considered
Praetorian Guard logo

Continuous offensive security

learn more
Continuous offensive security. Agentic AI plus the top 1% of offensive operators. Attacker-verified.

Read more about Praetorian Guard

Users also considered
BugProve logo

Product Security Simplified for the Internet of Things

learn more
BugProve offers an automated firmware analysis tool to identify, remediate and monitor known and zero-day vulnerabilities in IoT products - such as vulnerable dependencies, coding mistakes, misconfiguration, and more. Get your first results within 5 minutes and export your findings via links or PDF.

Read more about BugProve

Users also considered
blacklens.io logo

Discover vulnerabilities before attackers do.

learn more
Blacklensio is a platform that combines advanced penetration testing with proactive techniques like darknet monitoring, attack surface management, and vulnerability scanning to identify potential attack vectors early. By taking this comprehensive approach, it aims to not only detect costly cyber incidents but actively prevent them.

Read more about blacklens.io

Users also considered
BitNinja logo

A server security suite that detects & blocks web attacks

learn more
BitNinja is a cloud-based security suite designed to protect servers from botnets, scans, and other types of web attacks. Hosting providers can use the BitNinja defense network to detect and block botnet attacks. Features include real-time IP reputation, DoS detection, malware detection, and more. By analyzing all newly added rules, BitNinja aims to provide a low false-positive rate.

Read more about BitNinja

Users also considered
StorageGuard logo

Your data isn’t secure, unless your storage & backup are.

learn more
The industry’s ONLY Vulnerability Scanner for enterprise storage & backup systems, helping to secure these systems to protect your data

Read more about StorageGuard

Users also considered
Semgrep logo

Cloud-based AppSec platform for dev & security teams

learn more
Semgrep is a cloud-based application security platform offering SAST, SCA, and secrets detection across 35+ languages for development.

Read more about Semgrep

Users also considered
Sensagraph logo

Agentless vulnerability scanning in minutes.

learn more
Sensagraph is an agentless external security scanner that shows what your site exposes to the internet. In one pass it finds vulnerabilities like SQL injection and XSS, weak TLS, open ports, and risky tech, then gives risk-ranked, client-ready reports. Built for agencies, founders, and solo devs.

Read more about Sensagraph

Users also considered
Edgewatch logo

External attack surface management platform

learn more
Edgewatch attack surface management platform assists companies with discovering, monitoring, and analyzing devices accessible from the Internet.

Read more about Edgewatch

Users also considered
Enzoic for Active Directory logo

Tool to stop breached passwords & credentials automatically

learn more
Enzoic for Active Directory is a software that helps automate password security, block weak and exposed credentials in real time, enforce NIST compliance, and protect the organization without user disruption.

Read more about Enzoic for Active Directory

Users also considered
Deepinfo Attack Surface Platform logo

Know your attack surface. Empower your security.

learn more
Deepinfo Attack Surface Platform discovers all your digital assets, monitors them 24/7, detects any issues, and notifies you quickly so you can take immediate action.

Read more about Deepinfo Attack Surface Platform

Users also considered
Gearset DevOps logo

Cloud-based Salesforce DevOps platform for all teams

learn more
Cloud-based Salesforce DevOps platform covering CI/CD, metadata and data deployments, automated testing, backup, and version control.

Read more about Gearset DevOps

Users also considered
FortWatch.ai logo

Cloud EASM platform for SMBs and MSPs

learn more
Cloud-based external attack surface management platform for SMBs and MSPs, with continuous vulnerability scanning, AI-driven risk.

Read more about FortWatch.ai

Users also considered
HTTPCS Cyber Vigilance logo

Data leaks monitoring and cyber threats detection solution

learn more
Cybervigilance is a semi-automated, cloud-based OSINT and Cyber Threat Intelligence (CTI) solution that monitors the web, deep web and darknet for information leaks and indications of cyber threats, and alerts you 24/7 before the incident occurs.

Read more about HTTPCS Cyber Vigilance

Users also considered
Cyberwatch Vulnerability Manager logo

Vulnerability and asset inventory management software

learn more
Cyberwatch Vulnerability Manager is a security solution designed to help organizations track and manage vulnerabilities across network equipment, servers, devices, websites, workstations, and docker images via a unified portal. The platform lets users maintain an inventory of technologies and automatically captures and stores details about system issues, detection history, and remediation date.

Read more about Cyberwatch Vulnerability Manager

Users also considered
Fairwinds Insights logo

Configuration validation for Kubernetes workloads

learn more
Fairwinds Insights delivers dev and ops teams shared visibility across multi-clusters, anticipating and remediating configuration and security threats before they cost time or money.

Read more about Fairwinds Insights

Users also considered
CloudSploit logo

Automated security and configuration monitoring for AWS

learn more
CloudSploit is an automated security and configuration monitoring tool for Amazon Web Services (AWS) which scans configurations, looking for security concerns

Read more about CloudSploit

Users also considered
Visiativ Cyber logo

Cybersecurity solution for handling IT security

learn more
Visiativ Cyber specializes in safeguarding and fortifying the company's web applications. It employs a proactive approach that mitigates risks and vulnerabilities and fosters active engagement from all company stakeholders by offering valuable recommendations and effective solutions.

Read more about Visiativ Cyber

Users also considered
tbVA logo

Cloud-based vulnerability management software

learn more
tbVA is a cloud-based vulnerability management software that helps businesses in finance, IT, retail, healthcare, manufacturing, telecommunications, and other industries detect security breaches, evaluate risks, and more from a unified platform. It lets staff members collect compliance data, analyze network environments, and receive potential threat alerts.

Read more about tbVA

Users also considered
Panoptic Scans logo

Vulnerability scanning solution for applications and network

learn more
Panoptic Scans is a managed vulnerability scanning solution that performs application and network vulnerability scans.

Read more about Panoptic Scans

Users also considered