getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categoriesBlog & researchAbout us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Top Rated Vulnerability Scanner Software with Free

Last updated: November 2026

1 filter applied

Features

Integrated with

Pricing model

Devices supported

Organization types

User rating

49 software options

UserWay Accessibility Widget logo

Website accessibility widget & audit reports for compliance

visit website
The AI-Powered Accessibility Widget automatically finds/fixes web accessibility issues 24/7 for continuous ADA and WCAG compliance.

Read more about UserWay Accessibility Widget

Users also considered
RoboShadow logo

Global Vulnerability Scanner. Cyber Security, Demystified.

learn more
Get a complete Internal & External Vulnerability Assessment for Free for your organisation or network. The RoboShadow Vulnerability Scanner platform give you all the main Cyber Security assessment tests that are common in Penetration Testing, Cyber Certifications and used by bad guys themselves.

Read more about RoboShadow

Users also considered
Beagle Security logo

Secure your web apps & APIs from the latest vulnerabilities

learn more
Beagle Security helps you to identify security weaknesses and vulnerabilities on your web apps & APIs before hackers harm you in any way.

Read more about Beagle Security

Users also considered
Hexiosec ASM logo

Discover your external attack surface before attackers do.

learn more
Hexiosec ASM discovers your organisation's internet-facing assets, shadow IT and misconfigurations, then prioritises the resulting vulnerabilities into a clear, actionable risk workflow with API access and reporting built in.

Read more about Hexiosec ASM

Users also considered
Enginsight logo

ALL-IN-ONE SECURITY PLATFORM for SMEs

learn more
Enginsight combines IT monitoring, pentesting and SIEM in a unique IT security platform. A comprehensive feature set with many automation options and low configuration effort makes the solution the ideal foundation for any IT security strategy.

Read more about Enginsight

Users also considered
Burp Suite Professional logo

Secure web apps with advanced testing tools.

learn more
Industry-leading toolkit for web security testing to find, exploit, and validate vulnerabilities in web apps and APIs.

Read more about Burp Suite Professional

Users also considered
Xygeni Security logo

AI-Native ASPM. Secure Code to Cloud, Automatically.

learn more
Xygeni Vulnerability Scanner continuously scans code, open source, containers, and cloud infrastructure to detect exploitable vulnerabilities, secrets, misconfigurations, and malware. AI-driven triage reduces noise and prioritizes real risk with full ASPM context.

Read more about Xygeni Security

Users also considered
GuardRails logo

Application security software

learn more
With GuardRails, you can finally feel safe on every level of your security. The platform enhances development processes and gives developers control via its layered approach that shields them from code to the cloud for complete protection against attackers.

Read more about GuardRails

Users also considered
Probely logo

Automate Security Testing from Threat Found to Ticket Closed

learn more
Probely helps security & software engineers find vulnerabilities, instructions on how-to-fix them and automate security testing with ease.

Read more about Probely

Users also considered
CyberSmart logo

Cybersecurity, automated compliance, GDPR readiness for SMBs

learn more
CyberSmart is a cybersecurity solution that identifies system vulnerabilities on all devices, helps prevent cyberattacks, and provides continuous compliance while preparing for IASME Certification. This solution provides 24/7 device monitoring, vulnerability scanning, remote auditing, and more.

Read more about CyberSmart

Users also considered
Specops Password Auditor logo

Password audit & security tool for Active Directory accounts

learn more
Specops Password Auditor is a password audit tool that scans Active Directory accounts to identify potential vulnerabilities. This tool is designed to improve authentication and password security while helping organizations meet compliance standards. It can generate reports that list accounts with various vulnerabilities, such as expired, identical, blank passwords, and more. It can help organizations prevent breaches that result from leaked passwords.

Read more about Specops Password Auditor

Users also considered
Intruder logo

Vulnerability scanner that prevents security & data breaches

learn more
Intruder is a cloud-based vulnerability scanner which scans digital assets, identifies threats and generates reports. Designed for small to medium businesses, it assists users with automated assessments, bug tracking, patch management, network security, data encryption & hybrid penetration testing.

Read more about Intruder

Users also considered
Guardz logo

Unified cybersecurity for MSPs

learn more
Guardz is a AI-native, unified cybersecurity platform built for MSPs to protect SMBs across identity, endpoint, email, cloud, awareness, and more. With agentic detection, response, and 24/7 MDR, Guardz helps MSPs reduce tool sprawl and scale security across client environments.

Read more about Guardz

Users also considered
Offensity logo

Cloud-based vulnerability scanning tool

learn more
Offensity is a vulnerability scanning solution designed for professional IT administrators seeking an efficient and straightforward way to identify and resolve security weaknesses.

Read more about Offensity

Users also considered
Decloak - Web security intelligence logo

Cloud-based web security intelligence for all businesses

learn more
Cloud-based web security intelligence platform that de-anonymizes traffic, detects bots and threats, and delivers real-time risk.

Read more about Decloak - Web security intelligence

Users also considered
Defendify logo

All-in-one cybersecurity platform

learn more
Defendify offers comprehensive cybersecurity protection with layers of security including threat detection, security awareness training, assessments, and incident response support. Backed by automation and expert guidance, the platform aims to strengthen security posture across people, processes, and technology.

Read more about Defendify

Users also considered
MeghOps logo

Innovating Cyber Horizons

learn more
MeghOps is a provider of all-in-one cyber security solutions. With the help of MeghOps cloud security platform, cloud security compliance, firewall, security services (Pentest, Phishing And Training etc.) and your overall cybersecurity can be managed without any hassle.

Read more about MeghOps

Users also considered
SecOps Solution logo

SecOps Solution is a full-stack vulnerability and patch mana

learn more
SecOps is an AI-powered cybersecurity assessment platform that assists businesses with vulnerability management and patch management across endpoints, servers and network devices

Read more about SecOps Solution

Users also considered
Nessus logo

Vulnerability assessment solution for security practitioners

learn more
Nessus is a cloud-based vulnerability assessment solution designed to help security practitioners identity and resolve vulnerabilities to protect organizations against various security risks. It comes with pre-defined templates which can be customized by users to scan for critical vulnerabilities.

Read more about Nessus

Users also considered
OX Security logo

Cloud-security solution for administrators.

learn more
OX Security is a cloud security platform that helps small to large businesses in technology, banking, financial services, and other sectors protect their organization from advanced cyber threats. The platform provides real-time threat detection and response capabilities, giving administrators the ability to gain insights into their network so they can identify and address threats before those threats cause damage.

Read more about OX Security

Users also considered
Aikido Security logo

Cloud-based unified app security platform for all sizes

learn more
Aikido Security is an all-in-one vulnerability scanner. Secure your code, cloud, and runtime environments in one central system.


Features include SAST, DAST, SCA, IaC, CSPM, Container Security, Malware detection, Runtime Protection, License risk and more.

Read more about Aikido Security

Users also considered
Pentest-Tools.com logo

Discover what's possible. Prove what's real.

learn more
From vulnerability scans to proof, Pentest-Tools.com gives 2,000+ security teams in 119 countries the speed, accuracy, and coverage to confidently validate and mitigate risks across their infrastructure (network, cloud, web apps, APIs).

Read more about Pentest-Tools.com

Users also considered
Bytesafe logo

Source code and vulnerability management platform

learn more
Bytesafe is a firewall for dependencies. Using the source code and vulnerability management platform, businesses can protect applications, stay in control and keep unwanted dependencies out of the organization.

Read more about Bytesafe

Users also considered
ManageEngine Vulnerability Manager Plus logo

Find vulnerabilities. Fix risks. Strengthen security.

learn more
ManageEngine Vulnerability Manager Plus is an end-to-end exposure management tool that identifies, prioritizes, and mitigates endpoint vulnerabilities with native patching, compliance auditing, risk-based remediation, and more, to secure desktops, laptops, servers, VMs, DMZ servers, & network device

Read more about ManageEngine Vulnerability Manager Plus

Users also considered
AppTrana logo

Cloud-based WAAP platform for mid to large enterprise

learn more
Cloud-based WAAP platform unifying WAF, API security, DAST, bot mitigation, and DDoS protection for mid-market and enterprise.

Read more about AppTrana

Users also considered