getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Top Rated Vulnerability Scanner Software with Web based - Page 5

Last updated: November 2026

1 filter applied

Features


Integrated with


Pricing model


Devices supported


Organization types


User rating


131 software options

Sensagraph logo

Agentless vulnerability scanning in minutes.

learn more
Sensagraph is an agentless external security scanner that shows what your site exposes to the internet. In one pass it finds vulnerabilities like SQL injection and XSS, weak TLS, open ports, and risky tech, then gives risk-ranked, client-ready reports. Built for agencies, founders, and solo devs.

Read more about Sensagraph

Users also considered
SanctScan logo

Sanctions screening on every major official list, from $0

learn more
Sanctions screening for SMEs: all major official lists incl. OFAC, EU, UN and UK, updated daily. Fuzzy matching and a free plan.

Read more about SanctScan

Users also considered
Feroot logo

Cybersecurity solution

learn more
Feroot is a GRC AI platform that helps businesses automate website security and compliance programs to meet the requirements of PCI DSS 4.0, HIPAA, CCPA/CPRA, CIPA, GDPR, and other laws and standards. The platform provides complete visibility and control over a website's data, enabling businesses to stay ahead of evolving privacy compliance violations and security threats.

Read more about Feroot

Users also considered
Edgewatch logo

External attack surface management platform

learn more
Edgewatch attack surface management platform assists companies with discovering, monitoring, and analyzing devices accessible from the Internet.

Read more about Edgewatch

Users also considered
Deepinfo Attack Surface Platform logo

Know your attack surface. Empower your security.

learn more
Deepinfo Attack Surface Platform discovers all your digital assets, monitors them 24/7, detects any issues, and notifies you quickly so you can take immediate action.

Read more about Deepinfo Attack Surface Platform

Users also considered
Gearset DevOps logo

Cloud-based Salesforce DevOps platform for all teams

learn more
Cloud-based Salesforce DevOps platform covering CI/CD, metadata and data deployments, automated testing, backup, and version control.

Read more about Gearset DevOps

Users also considered
FortWatch.ai logo

Cloud EASM platform for SMBs and MSPs

learn more
Cloud-based external attack surface management platform for SMBs and MSPs, with continuous vulnerability scanning, AI-driven risk.

Read more about FortWatch.ai

Users also considered
HTTPCS Cyber Vigilance logo

Data leaks monitoring and cyber threats detection solution

learn more
Cybervigilance is a semi-automated, cloud-based OSINT and Cyber Threat Intelligence (CTI) solution that monitors the web, deep web and darknet for information leaks and indications of cyber threats, and alerts you 24/7 before the incident occurs.

Read more about HTTPCS Cyber Vigilance

Users also considered
Topscan logo

Automated security scanning for servers and APIs

learn more
TopScan is a security scanning platform that automatically detects vulnerabilities in servers, libraries, and APIs. The solution offers continuous monitoring, attack surface discovery, and vulnerability management capabilities using open-source scanning engines such as OWASP ZAP and Nuclei. TopScan includes features for web application security, cloud security, static code analysis, and SSL/TLS certificate monitoring, with integration options for CI/CD pipelines and Slack notifications.

Read more about Topscan

Users also considered
Cyberwatch Vulnerability Manager logo

Vulnerability and asset inventory management software

learn more
Cyberwatch Vulnerability Manager is a security solution designed to help organizations track and manage vulnerabilities across network equipment, servers, devices, websites, workstations, and docker images via a unified portal. The platform lets users maintain an inventory of technologies and automatically captures and stores details about system issues, detection history, and remediation date.

Read more about Cyberwatch Vulnerability Manager

Users also considered
Amazon Inspector logo

Vulnerability Management for EC2 and ECR.

learn more
Amazon Inspector is a vulnerability management solution that helps businesses scan AWS workloads to expose and identify vulnerabilities, enhance the security and compliance of applications across AWS, and meet compliance requirements.

Read more about Amazon Inspector

Users also considered
Fairwinds Insights logo

Configuration validation for Kubernetes workloads

learn more
Fairwinds Insights delivers dev and ops teams shared visibility across multi-clusters, anticipating and remediating configuration and security threats before they cost time or money.

Read more about Fairwinds Insights

Users also considered
CloudSploit logo

Automated security and configuration monitoring for AWS

learn more
CloudSploit is an automated security and configuration monitoring tool for Amazon Web Services (AWS) which scans configurations, looking for security concerns

Read more about CloudSploit

Users also considered
Visiativ Cyber logo

Cybersecurity solution for handling IT security

learn more
Visiativ Cyber specializes in safeguarding and fortifying the company's web applications. It employs a proactive approach that mitigates risks and vulnerabilities and fosters active engagement from all company stakeholders by offering valuable recommendations and effective solutions.

Read more about Visiativ Cyber

Users also considered
tbVA logo

Cloud-based vulnerability management software

learn more
tbVA is a cloud-based vulnerability management software that helps businesses in finance, IT, retail, healthcare, manufacturing, telecommunications, and other industries detect security breaches, evaluate risks, and more from a unified platform. It lets staff members collect compliance data, analyze network environments, and receive potential threat alerts.

Read more about tbVA

Users also considered
Panoptic Scans logo

Vulnerability scanning solution for applications and network

learn more
Panoptic Scans is a managed vulnerability scanning solution that performs application and network vulnerability scans.

Read more about Panoptic Scans

Users also considered
Eureka DevSecOps logo

Cloud ASPM platform for dev teams without AppSec staff

learn more
Cloud-based ASPM platform for dev and security teams, aggregating SAST, SCA, and secrets scanner findings with attack-scenario.

Read more about Eureka DevSecOps

Users also considered
Insight Recon logo

AD security assessment and remediation tool

learn more
Insight Recon is an Active Directory security tool that performs read-only scans on domain controllers to identify vulnerabilities and misconfigurations. It conducts over 135 security checks covering identity accounts, privileged access, certificate services, Kerberos delegation, and Group Policy settings. Each finding includes attacker context explaining exploitation techniques and provides PowerShell-level remediation steps tailored to the environment.

Read more about Insight Recon

Users also considered
ArgosX logo

Independent security testing for AI-built apps

learn more
Independent AI and human security testing for apps built with Lovable, Bolt, Replit and v0. Finds real flaws, proves how they happen and gives paste-ready fixes, with one score for security, UX, accessibility and performance.

Read more about ArgosX

Users also considered
CVE Scanner logo

Cloud-based website vulnerability scanner, one-off fee

learn more
Cloud-based vulnerability scanner for website owners and small teams, delivering CVE checks and misconfiguration detection.

Read more about CVE Scanner

Users also considered
PRISM Recon logo

Recon and threat intelligence platform

learn more
PRISM Recon is a reconnaissance and threat intelligence platform designed to support security and intelligence professionals.

Read more about PRISM Recon

Users also considered
TotalHeal VulnSight logo

Risk-ranked CVEs by TotalHeal

learn more
Risk-ranked CVEs from TotalHeal. Made in India by Freaquer Corporation Private Limited, Noida.

Read more about TotalHeal VulnSight

Users also considered
Vulnara logo

Cloud-based vulnerability management platform

learn more
Vulnara is a vulnerability management platform designed to help businesses identify, track, and remediate security risks across their.

Read more about Vulnara

Users also considered
Ostorlab logo

Cloud-based vulnerability management platform

learn more
Ostorlab is a cloud-based vulnerability management platform designed to help businesses detect, monitor, and remediate risks across enterprises' external attack surfaces.

Read more about Ostorlab

Users also considered
AquilaX logo

AI-enabled security solution for developers

learn more
AquilaX provides AI-enabled security scanning for developers, supporting GitHub, GitLab, and Bitbucket repositories. With SecuriTron, their AI assistant, users can automate scan setup and identify vulnerabilities through both automated and tailored scans.

Read more about AquilaX

Users also considered