getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categoriesBlog & researchAbout us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Top Rated Vulnerability Scanner Software with Free - Page 2

Last updated: November 2026

1 filter applied

Features

Integrated with

Pricing model

Devices supported

Organization types

User rating

49 software options

Security for Everyone logo

as known as Sec4Everyone | S4E

learn more
Security for Everyone is created to make cybersecurity understandable, affordable and manageable for everyone.

Read more about Security for Everyone

Users also considered
ZeroThreat logo

Fastest AI-Powered AppSec & Automated Pentesting Platform

learn more
ZeroThreat is an AI-powered web and API security platform that identifies real, exploitable vulnerabilities using attacker-style testing, delivering fast, proof-based results with minimal false positives.

Read more about ZeroThreat

Users also considered
Snyk logo

Cloud-based AI security platform for dev teams

learn more
Cloud-based AI security platform scanning code, open-source dependencies, containers, IaC, and APIs for development teams.

Read more about Snyk

Users also considered
USM Anywhere logo

Threat detection and response software for IT security teams

learn more
USM Anywhere is a cloud-based threat detection and response software designed to help IT professionals automatically collect and analyze data across cloud, on-premise, and hybrid environments. Powered by Alien Labs, the platform lets security teams leverage data from leverages from the Open Threat Exchange (OTX) to gain threat intelligence.

Read more about USM Anywhere

Users also considered
Sonatype Lifecycle logo

OSS Application Security and Dependency Management Solution

learn more
Sonatype Lifecycle controls open source risk across the SDLC to help application security scale their operations to the speed of development.

Eliminate unnecessary work
Improve efficiency and speed
Enhance productivity

Read more about Sonatype Lifecycle

Users also considered
KACE logo

Unified Endpoint Management by KACE. Where Next Meets Now.

learn more
KACE is a Unified Endpoint Management solution that offers a single point of control for managing IT systems across the entire organization, inside or outside your network. This comprehensive solution takes the stress out of keeping devices secure and compliant so you can do more.

Read more about KACE

Users also considered
Gordon VAPT logo
(0)

Automated vuln scanning & penetration testing

learn more
VAPT platform that identifies, validates, and prioritizes vulnerabilities across web, API, cloud, and network environments using automated scanning and expert testing, with actionable remediation guidance and continuous monitoring to reduce risk.

Read more about Gordon VAPT

Users also considered
CVEFinder logo
(0)

Website scanner for CVEs and dependencies

learn more
CVEFinder.io is a vulnerability scanner that identifies known Common Vulnerabilities and Exposures and vulnerable dependencies on websites. The platform analyzes headers, HTML, JavaScript, and package.json files to detect technologies and npm packages with security issues. It provides single and bulk scanning capabilities, technology detection with confidence levels, and access to a database of over three hundred forty-three thousand CVEs across nearly two hundred thousand products.

Read more about CVEFinder

Users also considered
Praetorian Guard logo
(0)

Continuous offensive security

learn more
Continuous offensive security. Agentic AI plus the top 1% of offensive operators. Attacker-verified.

Read more about Praetorian Guard

Users also considered
BugProve logo
(0)

Product Security Simplified for the Internet of Things

learn more
BugProve offers an automated firmware analysis tool to identify, remediate and monitor known and zero-day vulnerabilities in IoT products - such as vulnerable dependencies, coding mistakes, misconfiguration, and more. Get your first results within 5 minutes and export your findings via links or PDF.

Read more about BugProve

Users also considered
Vulseek logo
(0)

Attack surface and vulnerability management

learn more
Vulseek is a modern attack surface management and vulnerability detection platform designed for small and medium-sized organizations. It combines external scanning, internal network visibility, and cross-platform endpoint agents to give teams complete insights

Read more about Vulseek

Users also considered
Sensagraph logo
(0)

Agentless vulnerability scanning in minutes.

learn more
Sensagraph is an agentless external security scanner that shows what your site exposes to the internet. In one pass it finds vulnerabilities like SQL injection and XSS, weak TLS, open ports, and risky tech, then gives risk-ranked, client-ready reports. Built for agencies, founders, and solo devs.

Read more about Sensagraph

Users also considered
SanctScan logo
(0)

Sanctions screening on every major official list, from $0

learn more
Sanctions screening for SMEs: all major official lists incl. OFAC, EU, UN and UK, updated daily. Fuzzy matching and a free plan.

Read more about SanctScan

Users also considered
Edgewatch logo
(0)

External attack surface management platform

learn more
Edgewatch attack surface management platform assists companies with discovering, monitoring, and analyzing devices accessible from the Internet.

Read more about Edgewatch

Users also considered
Enzoic for Active Directory logo
(0)

Tool to stop breached passwords & credentials automatically

learn more
Enzoic for Active Directory is a software that helps automate password security, block weak and exposed credentials in real time, enforce NIST compliance, and protect the organization without user disruption.

Read more about Enzoic for Active Directory

Users also considered
Fairwinds Insights logo
(0)

Configuration validation for Kubernetes workloads

learn more
Fairwinds Insights delivers dev and ops teams shared visibility across multi-clusters, anticipating and remediating configuration and security threats before they cost time or money.

Read more about Fairwinds Insights

Users also considered
CloudSploit logo
(0)

Automated security and configuration monitoring for AWS

learn more
CloudSploit is an automated security and configuration monitoring tool for Amazon Web Services (AWS) which scans configurations, looking for security concerns

Read more about CloudSploit

Users also considered
Insight Recon logo
(0)

AD security assessment and remediation tool

learn more
Insight Recon is an Active Directory security tool that performs read-only scans on domain controllers to identify vulnerabilities and misconfigurations. It conducts over 135 security checks covering identity accounts, privileged access, certificate services, Kerberos delegation, and Group Policy settings. Each finding includes attacker context explaining exploitation techniques and provides PowerShell-level remediation steps tailored to the environment.

Read more about Insight Recon

Users also considered
ArgosX logo
(0)

Independent security testing for AI-built apps

learn more
Independent AI and human security testing for apps built with Lovable, Bolt, Replit and v0. Finds real flaws, proves how they happen and gives paste-ready fixes, with one score for security, UX, accessibility and performance.

Read more about ArgosX

Users also considered
Ostorlab logo
(0)

Cloud-based vulnerability management platform

learn more
Ostorlab is a cloud-based vulnerability management platform designed to help businesses detect, monitor, and remediate risks across enterprises' external attack surfaces.

Read more about Ostorlab

Users also considered
AquilaX logo
(0)

AI-enabled security solution for developers

learn more
AquilaX provides AI-enabled security scanning for developers, supporting GitHub, GitLab, and Bitbucket repositories. With SecuriTron, their AI assistant, users can automate scan setup and identify vulnerabilities through both automated and tailored scans.

Read more about AquilaX

Users also considered
Axix VulnScan logo
(0)

AI-driven automated penetration testing & vulnerability scan

learn more
Axix Pentestagent is an AI-driven pentesting platform with continuous vulnerability scanning, simulated attack exploitation, and network mapping. Built with API access and remediation reporting, it automates penetration testing across networks and web applications.

Read more about Axix VulnScan

Users also considered
AppTotal logo
(0)

Vulnerability management software

learn more
AppTotal is a business applications security platform. It lets employees connect the apps & add-ons to IT-approved platforms without worrying about security. AppTotal streamlines third-party app vetting processes, maps and analyzes the apps and integrations already connected to your environment, and helps teams automate app and extensions recertification and off-boarding process across Office 365, Google Workspace, Atlassian, Slack and other major platforms.

Read more about AppTotal

Users also considered
HostedScan logo
(0)

Cloud-based vulnerability scanning and risk management tool

learn more
Designed for businesses of all sizes, HostedScan is a cloud-based vulnerability scanner solution that helps businesses monitor risk insights and generate screening reports accordingly.

Read more about HostedScan

Users also considered