w3af is described as 'Web Application Attack and Audit Framework' and is an app in the development category. There are more than 25 alternatives to w3af for a variety of platforms, including Windows, Web-based, Linux, Mac and SaaS apps. The best w3af alternative is Burp Suite, which is free. Other great apps like w3af are Zed Attack Proxy (ZAP), Nikto, wapiti and nuclei.
Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting...
United Kingdom
The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.
Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6400 potentially dangerous files/CGIs, checks for outdated versions of over 1000 servers, and version specific problems on over 270 servers.
United States
Wapiti allows you to audit the security of your web applications. Wapiti is a command line tool.
Nuclei is used to send requests across targets based on a template, leading to zero false positives and providing fast scanning on a large number of hosts. Nuclei offers scanning for a variety of protocols, including TCP, DNS, HTTP, SSL, File, Whois, Websocket, Headless etc.
United States
Test your website like a real attacker would. Nautillo Pro finds account takeover risks, API exposure, broken access control, and AI security flaws before users and hackers do.
Estonia
EU
Unified application security platform — 12 scanners including SAST, DAST, SCA, and pen-testing in one on-premise deployment. Replaces your entire AppSec stack.
ShipSafe is a free online website safety checker that helps users quickly analyze whether a website is safe or potentially risky. By entering a domain or URL, ShipSafe provides a trust score, security insights, and reputation indicators that help users avoid scams, phishing...
Bangladesh
A fully automated, active web application security reconnaissance tool. Key features: High speed: pure C code, highly optimized HTTP handling, minimal CPU footprint - easily achieving 2000 requests per second with responsive targets.
United States
Audit your website security and web applications for SQL injection, Cross site scripting and other web vulnerabilities with Acunetix Web Security Scanner. Download Free Edition!
Free online vulnerability scanner. It has been working since 2016 and has two modes: quick and normal. The service is quite easy to use and does not require registration. You need to enter your website URL and email to receive a security report.
Find security vulnerabilities right from your browser. Experience the next generation security tools without the need to install any additional software.
United Kingdom
France
