Nikto AlternativesVulnerability Scanners and other similar apps like Nikto

Nikto is described as 'Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6400 potentially dangerous files/CGIs, checks for outdated versions of over 1000 servers, and version specific problems on over 270 servers' and is a vulnerability scanner in the security & privacy category. There are more than 10 alternatives to Nikto for a variety of platforms, including Windows, Web-based, Linux, Mac and SaaS apps. The best Nikto alternative is Lonkero, which is both free and Open Source. Other great apps like Nikto are Zed Attack Proxy (ZAP), wapiti, nuclei and Nautillo Pro.

Copy a direct link to this comment to your clipboard
Alternatives
Get a badge for your siteNikto alternatives page was last updated

Alternatives list

  1. Lonkero icon
     1 like

    Lonkero is a high-performance web vulnerability scanner built in Rust for penetration testers and bug bounty hunters who are tired of slow, bloated tools that generate hundreds of false positives.

    Cost / License

    • Freemium
    • Open Source

    Application type

    Platforms

    • Mac
    • Windows
    • Linux
    • Self-Hosted
    • Rust
    Good alternative?
     
  2. wapiti icon
     7 likes

    Wapiti allows you to audit the security of your web applications. Wapiti is a command line tool.

    Cost / License

    • Free
    • Open Source

    Platforms

    • Windows
    • Linux
    Good alternative?
     
    |
    1
  3. nuclei icon
     3 likes

    Nuclei is used to send requests across targets based on a template, leading to zero false positives and providing fast scanning on a large number of hosts. Nuclei offers scanning for a variety of protocols, including TCP, DNS, HTTP, SSL, File, Whois, Websocket, Headless etc.

    Cost / License

    • Free
    • Open Source (MIT)

    Application type

    Platforms

    • Mac
    • Windows
    • Linux
    Good alternative?
     
  4. Nautillo Pro icon
     1 like

    Test your website like a real attacker would. Nautillo Pro finds account takeover risks, API exposure, broken access control, and AI security flaws before users and hackers do.

    Cost / License

    • Freemium
    • Proprietary

    Platforms

    • Online
    • Software as a Service (SaaS)
    Good alternative?
     
  5. Unified application security platform — 12 scanners including SAST, DAST, SCA, and pen-testing in one on-premise deployment. Replaces your entire AppSec stack.

    Cost / License

    • Freemium
    • Proprietary

    Application type

    Platforms

    • Windows
    Good alternative?
     
  6. ShipSafe icon
     1 like

    ShipSafe is a free online website safety checker that helps users quickly analyze whether a website is safe or potentially risky. By entering a domain or URL, ShipSafe provides a trust score, security insights, and reputation indicators that help users avoid scams, phishing...

    Cost / License

    • Freemium
    • Proprietary

    Platforms

    • Software as a Service (SaaS)
    Good alternative?
     
  7. skipfish icon
     14 likes

    A fully automated, active web application security reconnaissance tool. Key features: High speed: pure C code, highly optimized HTTP handling, minimal CPU footprint - easily achieving 2000 requests per second with responsive targets.

    Cost / License

    • Free
    • Open Source

    Application type

    Alerts

    • Discontinued

    Platforms

    • Mac
    • Windows
    • Linux
    • BSD
    Good alternative?
     
  8. w3af icon
     16 likes

    w3af is a Web Application Attack and Audit Framework.

    Cost / License

    • Free
    • Open Source

    Platforms

    • Windows
    • Linux
    • US flagUnited States
    Main screen with OSWASP_TOP10 testing profile selected.
    Good alternative?
     
  9. Pabit icon
     1 like

    Pabit is a modern project management and task tracking tool designed to help teams organize work without unnecessary complexity. It provides tasks, sprints, project modules, and real-time analytics in a clean and intuitive interface.

    Cost / License

    • Free
    • Proprietary

    Application type

    Platforms

    • Online
    Good alternative?
     
  10. Acunetix icon
     14 likes

    Audit your website security and web applications for SQL injection, Cross site scripting and other web vulnerabilities with Acunetix Web Security Scanner. Download Free Edition!

    77 Acunetix alternatives

    Cost / License

    • Paid
    • Proprietary

    Application type

    Platforms

    • Windows
    • Online
    • Wordpress
    Good alternative?
     
  11. Websecurify icon
     7 likes

    Websecurify is a powerful web application security testing environment designed from the ground up to provide the best combination of automatic and manual vulnerability testing technologies.

    Cost / License

    • Paid
    • Proprietary

    Application type

    Platforms

    • Mac
    • Windows
    • Linux
    Good alternative?
     
12 of 23 Nikto alternatives