getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categoriesBlog & researchAbout us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Top Rated Vulnerability Scanner Software with Open source - Page 3

Last updated: November 2026

1 filter applied

Features

Integrated with

Pricing model

Devices supported

Organization types

User rating

138 software options

Nessus logo

Vulnerability assessment solution for security practitioners

learn more
Nessus is a cloud-based vulnerability assessment solution designed to help security practitioners identity and resolve vulnerabilities to protect organizations against various security risks. It comes with pre-defined templates which can be customized by users to scan for critical vulnerabilities.

Read more about Nessus

Users also considered
OX Security logo

Cloud-security solution for administrators.

learn more
OX Security is a cloud security platform that helps small to large businesses in technology, banking, financial services, and other sectors protect their organization from advanced cyber threats. The platform provides real-time threat detection and response capabilities, giving administrators the ability to gain insights into their network so they can identify and address threats before those threats cause damage.

Read more about OX Security

Users also considered
Crashtest Security logo

Cloud-based vulnerability scanning & testing software

learn more
Crashtest Security is a vulnerability testing software that helps businesses perform automated scans to detect cybersecurity threats across applications. Managers can conduct single-page, multi-page, and documentation-based scans to identify attack vectors across several web applications.

Read more about Crashtest Security

Users also considered
Threatspy logo

Reinventing Application Security

learn more
Developer-first Application & API Security Management Platform

Read more about Threatspy

Users also considered
Aikido Security logo

Cloud-based unified app security platform for all sizes

learn more
Aikido Security is an all-in-one vulnerability scanner. Secure your code, cloud, and runtime environments in one central system.


Features include SAST, DAST, SCA, IaC, CSPM, Container Security, Malware detection, Runtime Protection, License risk and more.

Read more about Aikido Security

Users also considered
Wiz logo

Cloud-native CNAPP for multi-cloud security teams

learn more
Cloud security solution that detects, prioritizes, and helps manage and remediate vulnerabilities across multiple cloud application, workloads, and environments.

Read more about Wiz

Users also considered
Intigriti logo

Global Bug Bounty, VDP & Pentesting Testing Platform

learn more
Intigriti is the trusted leader in crowdsourced security, empowering the world’s largest organizations to find and fix vulnerabilities

Read more about Intigriti

Users also considered
Versio.io logo

CMDB, IT Asset Management, Governance, Security

learn more
Versio.io continuously and automatically detects and documents changes in businesses and IT landscapes. Data from third-party applications that companies use to run business processes, monitor the IT landscape and control IT service management can be seamlessly integrated.

Read more about Versio.io

Users also considered
DeepSurface logo

Risk-based predictive vulnerability management platform

learn more
DeepSurface is a risk-based predictive vulnerability management platform for cybersecurity, delivering critical insights and actionable recommendations to the most vulnerable assets. It uses machine learning to detect vulnerabilities, provide prioritization, and manage critical patching—without causing disruption.

Read more about DeepSurface

Users also considered
Pentest-Tools.com logo

Discover what's possible. Prove what's real.

learn more
From vulnerability scans to proof, Pentest-Tools.com gives 2,000+ security teams in 119 countries the speed, accuracy, and coverage to confidently validate and mitigate risks across their infrastructure (network, cloud, web apps, APIs).

Read more about Pentest-Tools.com

Users also considered
Ansible Automation Platform logo

IT automation tool to manage configuration & deployment

learn more
Red Hat Ansible Automation Platform is a cloud-based IT automation tool, which assists organizations with system configuration, software deployment, cloud provisioning, zero downtime rolling updates, and various other routine tasks.

Read more about Ansible Automation Platform

Users also considered
Bytesafe logo

Source code and vulnerability management platform

learn more
Bytesafe is a firewall for dependencies. Using the source code and vulnerability management platform, businesses can protect applications, stay in control and keep unwanted dependencies out of the organization.

Read more about Bytesafe

Users also considered
CloudWize logo

Cloud security and compliance management solution

learn more
Get 360° cloud protection from architecture design to runtime. This agentless, drag-and-drop, no-code solution enables you to detect and fix cloud issues in minutes. Over 1000 rules running continuously on your cloud within minutes of onboarding.

Read more about CloudWize

Users also considered
Techowlshield logo

"Defending Your Digital Domain Against the UNSEEN ENEMY"

learn more
TechOwl Shield offers a real-time, AI-powered view of your cybersecurity threats, helping you identify and prioritize vulnerabilities for around-the-clock data protection.

Read more about Techowlshield

Users also considered
HackerOne logo

Cybersecurity platform to identify and fix vulnerabilities

learn more
HackerOne is a web-based cybersecurity platform designed to help businesses across various industry verticals such as education, telecom, aviation, media, financial services, and more eliminate vulnerabilities by securing continuous development processes.

Read more about HackerOne

Users also considered
Detectify logo

Vulnerability management solution for security teams

learn more
Detectify is a cybersecurity solution designed to help security teams monitor assets and identify threats across web applications. Administrators can add domains or IP addresses, verify asset ownership, and scan profiles to track vulnerabilities including DNS misconfigurations and SQL injections.

Read more about Detectify

Users also considered
ManageEngine Vulnerability Manager Plus logo

Find vulnerabilities. Fix risks. Strengthen security.

learn more
ManageEngine Vulnerability Manager Plus is an end-to-end exposure management tool that identifies, prioritizes, and mitigates endpoint vulnerabilities with native patching, compliance auditing, risk-based remediation, and more, to secure desktops, laptops, servers, VMs, DMZ servers, & network device

Read more about ManageEngine Vulnerability Manager Plus

Users also considered
Cyrisma logo

All-in-one cyber risk management platform

learn more
CYRISMA is a revolutionary cyber risk management platform that combines multiple risk discovery, assessment and mitigation features, removing the need for organizations to integrate different single-point products to get the same outcomes.

Read more about Cyrisma

Users also considered
Holm Security VMP logo

Stay one step ahead of cybercriminals.

learn more
Holm Security is a global leader in vulnerability and exposure management, empowering organizations to build a systematic, risk‑based, and proactive cyber defense. Serving customers worldwide, Holm Security’s European technology with built-in ASM helps organizations strengthen their cybersecurity.

Read more about Holm Security VMP

Users also considered
AppTrana logo

Cloud-based WAAP platform for mid to large enterprise

learn more
Cloud-based WAAP platform unifying WAF, API security, DAST, bot mitigation, and DDoS protection for mid-market and enterprise.

Read more about AppTrana

Users also considered
Security for Everyone logo

as known as Sec4Everyone | S4E

learn more
Security for Everyone is created to make cybersecurity understandable, affordable and manageable for everyone.

Read more about Security for Everyone

Users also considered
ZeroThreat logo

Fastest AI-Powered AppSec & Automated Pentesting Platform

learn more
ZeroThreat is an AI-powered web and API security platform that identifies real, exploitable vulnerabilities using attacker-style testing, delivering fast, proof-based results with minimal false positives.

Read more about ZeroThreat

Users also considered
Raynet One logo

Find out more on www.raynet-inc.com.

learn more
Complete data is the basis for managing IT assets, optimizing costs and minimizing risks.

TThe integration of different data sources and the preparation of concise dashboards and reports serve as a decision-making base and enable you to effectively manage data with the highest data quality.

Read more about Raynet One

Users also considered
Syxsense logo

Unified Security and Endpoint Management

learn more
Syxsense delivers comprehensive vulnerability scanning, including security configurations. With Syxsense, you can safeguard your systems with centralized patch updated and security risk detection and resolution through a single agent.

Read more about Syxsense

Users also considered
Saner CVEM logo

Integrated platform for continuous vulnerability detection.

learn more
SecPod Saner is an integrated platform that helps businesses secure system devices and monitor potential threats across digital assets via continuous vulnerability management, patch management and more. Key features include regulatory compliance, asset management, audit trails, and reporting.

Read more about Saner CVEM

Users also considered