getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categoriesBlog & researchAbout us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Top Rated Vulnerability Scanner Software with Windows

Last updated: September 2026

1 filter applied

Features

Integrated with

Pricing model

Devices supported

Organization types

User rating

30 software options

Appgate SDP logo

Zero Trust Security Access Platform

learn more
Appgate is secure access provider that delivers solutions that prevents complex threats and reduce operational costs, securing the lives of the people that rely on them.

Read more about Appgate SDP

Users also considered
SolarWinds Network Configuration Manager logo

Network Configuration Management and Backup

learn more
SolarWinds Network Configuration Manager is an automated network configuration management and backup solution that ensures a high level of network reliability with network configuration backups. SolarWinds NCM simplifies the backup, monitoring, and restoration of router, switch, and device configurations.

Read more about SolarWinds Network Configuration Manager

Users also considered
Enginsight logo

ALL-IN-ONE SECURITY PLATFORM for SMEs

learn more
Enginsight combines IT monitoring, pentesting and SIEM in a unique IT security platform. A comprehensive feature set with many automation options and low configuration effort makes the solution the ideal foundation for any IT security strategy.

Read more about Enginsight

Users also considered
Specops Password Auditor logo

Password audit & security tool for Active Directory accounts

learn more
Specops Password Auditor is a password audit tool that scans Active Directory accounts to identify potential vulnerabilities. This tool is designed to improve authentication and password security while helping organizations meet compliance standards. It can generate reports that list accounts with various vulnerabilities, such as expired, identical, blank passwords, and more. It can help organizations prevent breaches that result from leaked passwords.

Read more about Specops Password Auditor

Users also considered
ESET PROTECT MDR logo

Future ready protection for enterprise

learn more
Airtight protection of your IT environment,
with complete cyber risk management and
world-class ESET expertise on call.

Read more about ESET PROTECT MDR

Users also considered
CODA Footprint logo

Multi-tenant vulnerability & contextual risk management tool

learn more
CODA Footprint is a SaaS multi-tenant attack surface reduction solution that covers vulnerability management, contextual risk scoring and prioritized remediation in an all-in-one package.

Read more about CODA Footprint

Users also considered
Strobes RBVM logo

Scalable and Faster Vulnerability Management

learn more
Strobes VM365 is the frontier that gives you the consolidated view of all the findings from various security sources, empowering your teams to focus on resolving the right set of findings.

Read more about Strobes RBVM

Users also considered
Fidelis Elevate logo

Extended Detection and Response (XDR) Cybersecurity Platform

learn more
Fidelis Elevate is a cloud-based XDR Solution that delivers endpoint security, network security, deception, and Active Directory protection in a single platform.

Read more about Fidelis Elevate

Users also considered
SecOps Solution logo

SecOps Solution is a full-stack vulnerability and patch mana

learn more
SecOps is an AI-powered cybersecurity assessment platform that assists businesses with vulnerability management and patch management across endpoints, servers and network devices

Read more about SecOps Solution

Users also considered
Nessus logo

Vulnerability assessment solution for security practitioners

learn more
Nessus is a cloud-based vulnerability assessment solution designed to help security practitioners identity and resolve vulnerabilities to protect organizations against various security risks. It comes with pre-defined templates which can be customized by users to scan for critical vulnerabilities.

Read more about Nessus

Users also considered
Aikido Security logo

Cloud-based unified app security platform for all sizes

learn more
Aikido Security is an all-in-one vulnerability scanner. Secure your code, cloud, and runtime environments in one central system.


Features include SAST, DAST, SCA, IaC, CSPM, Container Security, Malware detection, Runtime Protection, License risk and more.

Read more about Aikido Security

Users also considered
Holm Security VMP logo

Stay one step ahead of cybercriminals.

learn more
Holm Security is a global leader in vulnerability and exposure management, empowering organizations to build a systematic, risk‑based, and proactive cyber defense. Serving customers worldwide, Holm Security’s European technology with built-in ASM helps organizations strengthen their cybersecurity.

Read more about Holm Security VMP

Users also considered
Invicti logo

Proof-based application security testing platform

learn more
Invicti is a web application and API security platform that provides proof-based vulnerability scanning with DAST, SAST, and ASPM capabilities. The platform discovers and tests websites, applications, and APIs while correlating security findings from multiple tools to prioritize real vulnerabilities. It integrates with CI/CD pipelines and offers AI-powered remediation guidance to help development teams address security issues efficiently.

Read more about Invicti

Users also considered
ManageEngine Vulnerability Manager Plus logo

Find vulnerabilities. Fix risks. Strengthen security.

learn more
ManageEngine Vulnerability Manager Plus is an end-to-end exposure management tool that identifies, prioritizes, and mitigates endpoint vulnerabilities with native patching, compliance auditing, risk-based remediation, and more, to secure desktops, laptops, servers, VMs, DMZ servers, & network device

Read more about ManageEngine Vulnerability Manager Plus

Users also considered
Raynet One logo

Find out more on www.raynet-inc.com.

learn more
Complete data is the basis for managing IT assets, optimizing costs and minimizing risks.

TThe integration of different data sources and the preparation of concise dashboards and reports serve as a decision-making base and enable you to effectively manage data with the highest data quality.

Read more about Raynet One

Users also considered
Saner CVEM logo

Integrated platform for continuous vulnerability detection.

learn more
SecPod Saner is an integrated platform that helps businesses secure system devices and monitor potential threats across digital assets via continuous vulnerability management, patch management and more. Key features include regulatory compliance, asset management, audit trails, and reporting.

Read more about Saner CVEM

Users also considered
USM Anywhere logo

Threat detection and response software for IT security teams

learn more
USM Anywhere is a cloud-based threat detection and response software designed to help IT professionals automatically collect and analyze data across cloud, on-premise, and hybrid environments. Powered by Alien Labs, the platform lets security teams leverage data from leverages from the Open Threat Exchange (OTX) to gain threat intelligence.

Read more about USM Anywhere

Users also considered
Kiuwan logo

Secure your applications confidently with Kiuwan.

learn more
Kiuwan is an end-to-end application security platform supporting 30+ languages with SAST, SCA, & QA. Kiuwan integrates with IDEs for direct analysis, offers tailored reports, and meets NIST, CWE, & OWASP standards.

Manage open source components and secure your projects confidently with Kiuwan.

Read more about Kiuwan

Users also considered
VulScan logo

Cloud-based network vulnerability management software

learn more
Designed for IT professionals, security officers, and compliance administrators, VulScan is a network vulnerability management application that helps automate internal security scanning processes, monitor network endpoints, and create service tickets on a centralized platform.

Read more about VulScan

Users also considered
Acunetix logo

Cloud-based and automated web application security solution

learn more
Acunetix is a cybersecurity solution offering automatic web security testing technology that enables organizations to scan and audit complex, authenticated, HTML5 and JavaScript-heavy websites to detect vulnerabilities such as XSS, SQL Injection, and more.

Read more about Acunetix

Users also considered
Sigrid logo

One platform to manage your entire application landscape

learn more
Sigrid simplifies vulnerability scanning with its powerful platform that provides ongoing monitoring and detailed analysis of software vulnerabilities. It ensures that organizations can proactively manage their security risks and maintain the integrity of their software systems.

Read more about Sigrid

Users also considered
KACE logo

Unified Endpoint Management by KACE. Where Next Meets Now.

learn more
KACE is a Unified Endpoint Management solution that offers a single point of control for managing IT systems across the entire organization, inside or outside your network. This comprehensive solution takes the stress out of keeping devices secure and compliant so you can do more.

Read more about KACE

Users also considered
DeepSurface logo

Risk-based predictive vulnerability management platform

learn more
DeepSurface is a risk-based predictive vulnerability management platform for cybersecurity, delivering critical insights and actionable recommendations to the most vulnerable assets. It uses machine learning to detect vulnerabilities, provide prioritization, and manage critical patching—without causing disruption.

Read more about DeepSurface

Users also considered
Enzoic for Active Directory logo
(0)

Tool to stop breached passwords & credentials automatically

learn more
Enzoic for Active Directory is a software that helps automate password security, block weak and exposed credentials in real time, enforce NIST compliance, and protect the organization without user disruption.

Read more about Enzoic for Active Directory

Users also considered
Insight Recon logo
(0)

AD security assessment and remediation tool

learn more
Insight Recon is an Active Directory security tool that performs read-only scans on domain controllers to identify vulnerabilities and misconfigurations. It conducts over 135 security checks covering identity accounts, privileged access, certificate services, Kerberos delegation, and Group Policy settings. Each finding includes attacker context explaining exploitation techniques and provides PowerShell-level remediation steps tailored to the environment.

Read more about Insight Recon

Users also considered