getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categoriesBlog & researchAbout us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Top Rated Vulnerability Management Software with Subscription - Page 8

Last updated: November 2026

1 filter applied

Features

Integrated with

Pricing model

Devices supported

Organization types

User rating

202 software options

NorthStar logo
(0)

Risk-Based Vulnerability Management

learn more
NorthStar is a powerful, fully-integrated security platform that allows users to manage the information security risk of your organization in an automated, flexible and reliable way.

Read more about NorthStar

Users also considered
Guardium Data Security Center logo
(0)

Comprehensive data security solution

learn more
IBM Guardium Data Security Center is a comprehensive solution that protects your data from current and emerging risks, including AI and cryptographic attacks. It offers a unified experience for security teams to collaborate, manage vulnerabilities, and streamline compliance. The product covers the full data security lifecycle, from discovery to remediation, across on-premises and cloud environments, structured and unstructured data.

Read more about Guardium Data Security Center

Users also considered
BoringSec logo
(0)

Cloud-based web security audit tool for AI app teams

learn more
Cloud-based security audit tool for deployed websites and AI-built apps, covering secrets, headers, TLS, and vulnerability detection.

Read more about BoringSec

Users also considered
Amazon Inspector logo
(0)

Vulnerability Management for EC2 and ECR.

learn more
Amazon Inspector is a vulnerability management solution that helps businesses scan AWS workloads to expose and identify vulnerabilities, enhance the security and compliance of applications across AWS, and meet compliance requirements.

Read more about Amazon Inspector

Users also considered
Koopic logo
(0)

Asset inventory & risk-based vulnerability focus

learn more
Koopic is a cyber asset attack surface management and unified vulnerability management platform that aggregates data from security and IT tools into a single asset inventory. The software merges duplicate records from sources like EDR, MDM, CMDB, and cloud platforms to create one golden record per device. Koopic recalculates vulnerability scores based on exploit activity, asset exposure, and criticality to prioritize remediation efforts beyond standard CVSS ratings.

Read more about Koopic

Users also considered
Novee logo
(0)

AI-powered penetration testing platform

learn more
Novee provides AI-powered penetration testing software that continuously identifies vulnerabilities and exploit chains in live environments. The platform uses AI agents to map systems, detect business logic flaws, and validate security issues with clear replication steps. It offers personalized remediation guidance tailored to specific architectures and automatically retests after fixes are implemented.

Read more about Novee

Users also considered
PROsecure logo
(0)

Cloud security suite to protect against cyber attacks

learn more
PROsecure is a cloud security suite designed to help small and midsize enterprises (SMEs) protect data and applications from cyber-attack and hacking attempts.

Read more about PROsecure

Users also considered
tbVA logo
(0)

Cloud-based vulnerability management software

learn more
tbVA is a cloud-based vulnerability management software that helps businesses in finance, IT, retail, healthcare, manufacturing, telecommunications, and other industries detect security breaches, evaluate risks, and more from a unified platform. It lets staff members collect compliance data, analyze network environments, and receive potential threat alerts.

Read more about tbVA

Users also considered
Eureka DevSecOps logo
(0)

Cloud ASPM platform for dev teams without AppSec staff

learn more
Cloud-based ASPM platform for dev and security teams, aggregating SAST, SCA, and secrets scanner findings with attack-scenario.

Read more about Eureka DevSecOps

Users also considered
STORM logo
(0)

IT security management solution for organizations

learn more
STORM is a cloud-based IT security management system designed to assist cyber security teams within organizations with tracking and management of network issues. Key features include workflow automation, message authentication, secure digital signatures, resource planning, and reporting.

Read more about STORM

Users also considered
ThreadFix logo
(0)

Vulnerability management & risk prioritization platform

learn more
ThreadFix is a vulnerability management solution designed to help businesses consolidate test results and prioritize risk decisions. Software development and server operation teams can export vulnerability data into defect tracking and ticketing systems to resolve discovered vulnerabilities.

Read more about ThreadFix

Users also considered
Skybox Vulnerability Control logo
(0)

Threat-centric vulnerability management

learn more
Skybox Vulnerability Control supports a systematic approach to vulnerability management unlike any other vendor. Our solution is rooted in comprehensive visibility of your attack surface, using its context to analyze, prioritize and remediate your riskiest vulnerabilities fast.

Read more about Skybox Vulnerability Control

Users also considered
HCL BigFix SaaS Remediate logo
(0)

Cloud vulnerability management with auto patching

learn more
HCL BigFix SaaS Remediate is a cloud-native platform automating the detection and remediation of security vulnerabilities across endpoints. It offers access to over 500,000 pre-built fixes for more than 100 operating systems and 400 third-party applications. The solution includes risk-based prioritization via CyberFOCUS analytics, automated patching workflows, and Protection Level Agreements to track remediation performance.

Read more about HCL BigFix SaaS Remediate

Users also considered
Hackuity logo
(0)

Risk-Based Vulnerability Management Cockpit

learn more
Hackuity is a comprehensive security solution that orchestrates and automates the vulnerability management process.

Read more about Hackuity

Users also considered
TotalHeal VulnSight logo
(0)

Vulnerability management software

learn more
TotalHeal VulnSight is a vulnerability management solution designed to help organizations identify, assess, and remediate security.

Read more about TotalHeal VulnSight

Users also considered
Ostorlab logo
(0)

Cloud-based vulnerability management platform

learn more
Ostorlab is a cloud-based vulnerability management platform designed to help businesses detect, monitor, and remediate risks across enterprises' external attack surfaces.

Read more about Ostorlab

Users also considered
Reflectiz logo
(0)

Digital Security for Websites

learn more
Reflectiz empowers businesses to make web applications safer by mitigating their digital risks without any website impact.

Read more about Reflectiz

Users also considered
Cyble logo
(0)

Cloud-based AI threat intelligence for enterprises

learn more
Cloud-based AI-native threat intelligence platform for enterprises, delivering dark web monitoring, brand protection, and attack.

Read more about Cyble

Users also considered
Akto logo
(0)

API Security Platform for Modern Appsec teams

learn more
Akto is an industry-leading solution for API discovery, API security posture management, sensitive data exposure, API security testing.

Read more about Akto

Users also considered
ThunderScan logo
(0)

SAST Application Security

learn more
ThunderScan by DefenseCode is a Static Application Security Testing (SAST) software that allows businesses to perform deep and extensive security analysis of various application source codes. ThunderScan can be integrated with existing CI/CD pipelines and DevOps environment, offering a platform that requires almost no user input, easy to use, and can be deployed during or after development.

Read more about ThunderScan

Users also considered
RHDVM logo
(0)

Vulnerability governance tool for cyber risk reduction

learn more
RHDVM is a vulnerability management software that assists with extensive governance of the entire vulnerability lifecycle, including detection, mitigation, and more.

Read more about RHDVM

Users also considered
Spider IQ by Spider Gadget logo
(0)

AI-powered cyber exposure management platform

learn more
Spider Gadget is a cyber exposure management platform that provides continuous vulnerability scanning and automated penetration testing for organizational networks. The software features AI-powered risk scoring to prioritize vulnerabilities, real-time attack surface monitoring across domains and cloud assets, and compliance reporting for standards including SOC 2, ISO 27001, PCI DSS, and HIPAA. The platform integrates with tools such as Slack, Jira, and PagerDuty for alerting.

Read more about Spider IQ by Spider Gadget

Users also considered
vPenTest logo
(0)

Meet Modern Security

learn more
PenTest is an automated and full-scale penetration testing platform that makes network penetration testing more affordable.

Read more about vPenTest

Users also considered
Compliance Foresight logo
(0)

Scalable GRC Framework for Enterprise

learn more
A scalable GRC framework for enterprise , fast , easy, quick modules for cyber security compliances. Automated Reports, Business Logics and inbuilt workflows are the key highlights of the solution.

Read more about Compliance Foresight

Users also considered
Chainguard logo
(0)

Trusted open source tools for secure development

learn more
Chainguard provides trusted open source artifacts like containers, libraries, and VM images for modern software stacks. The platform offers minimal container images with CVE fixes, hardened libraries against supply chain attacks, and optimized VM images rebuilt daily. Built via an SLSA Level Three-compliant factory, Chainguard ensures verified, traceable builds with SBOMs and provenance documentation to meet compliance needs.

Read more about Chainguard

Users also considered