Best Pentesting & vulnerability assessment toolkit alternatives and competitors

Detectify

Detectify is a web security service that simulates automated hacker attacks on your website, detecting critical security issues before real hackers do. Starting from an idea of a group of security-in

Damn Vulnerable iOS App (DVIA)

Damn Vulnerable iOS App (DVIA) on SecurityListing: iOS application for testing iOS penetration testing skills in a legal environment.

Corsica Technologies Security Consulting Services

Corsica Technologies Security Consulting Services on SecurityListing: A cybersecurity consulting service that provides security assessments, compliance guidance, and strategic planning across multiple industries with flexible engagement models.

Dhound

Dhound is a cybersecurity company providing web application penetration testing, focused on manual approach and comprehensive delivery, helping IT companies be secure and compliant. We’ll find cracks

PentesterLab PRO

PentesterLab PRO on SecurityListing: Online platform offering 700+ hands-on web security exercises and training

Cybrary

Cybrary on SecurityListing: Cybrary is an online learning platform that provides accessible and affordable training in cybersecurity skills.

Halborn

Award-winning ethical blockchain hackers to secure your stack end-to-end. Far beyond smart contracts. Because smart contract audits are never enough to ensure your company is safe. Halborn brings awa

Alpine Security

Alpine Security provides penetration testing, security assessments and cybersecurity training services. Alpine's goals are to help organizations reduce cybersecurity risk and empower cybersecurity pr

LAMPSecurity Training

LAMPSecurity Training on SecurityListing: A series of vulnerable virtual machine images with documentation to teach Linux, Apache, PHP, MySQL security.

LogicalTrust

LogicalTrust security testing specialists find the weakest points in your company and show you how to fix them step-by-step, as well as how to improve your security. Our offer covers security tests o

bWAPP

bWAPP on SecurityListing: A free and open-source deliberately insecure web application for security enthusiasts, developers, and students to discover and prevent web vulnerabilities.

ISE Vulnerability Assessment Services

ISE Vulnerability Assessment Services on SecurityListing: Manual vulnerability assessment services with custom exploit development

Tulpa AI

Tulpa develops safe AI assistants (co-pilots) to support and enhance human performance in high-stakes, mission-critical decision-making environments. We enable high-performance, high-value, scalable w

eShard

At eShard, we help industrial leaders and government agencies take control of chip security testing and binary analysis. Our platform provides a dedicated testing environment where teams can analyze

PoshC2

PoshC2 on SecurityListing: A proxy aware C2 framework for penetration testing, red teaming, post-exploitation, and lateral movement with modular format and highly configurable payloads.

AFINE

AFINE is a trusted advisor in the field of cybersecurity and pentesting. We have been operating since 2015. Our team consists of carefully selected experts in the field of software, hardware, cryptogr

BeEF

BeEF on SecurityListing: BeEF is a specialized penetration testing tool for exploiting web browser vulnerabilities to assess security.

NopSec

NopSec provides automated IT security control measurement and risk remediation solutions to help businesses protect their IT environments from security breaches. The company's flagship SaaS product,

Conviso Platform

Conviso Platform on SecurityListing: AppSec platform for managing application security posture with consulting services

LEXORA.BY

See the product page for description, features, and reviews.

7 Elements

7 Elements is an independent IT security testing company providing expertise in technical information assurance through security testing, incident response and consultancy. At 7 Elements our approach

Aegis Security

Based in Singapore, Aegis Security is a digital security company that works with the local government and private companies. Our mission is to support our clients, and secure their systems against po

Anvil Secure

Anvil specialize in penetration testing, embedded systems, and research to help identify vulnerabilities and mitigate risk. Penetration TestingWe test your systems the way attackers would, uncovering

Cobalt Strike's ExternalC2 framework

Cobalt Strike's ExternalC2 framework on SecurityListing: A specification/framework for extending default C2 communication channels in Cobalt Strike

CSIS Assume Breach

CSIS Assume Breach on SecurityListing: Simulated breach testing service to identify vulnerabilities and weaknesses

Dradis Community Edition (CE)

Dradis Community Edition (CE) on SecurityListing: Open-source platform for pentest reporting and security team collaboration

ExploitDB

ExploitDB on SecurityListing: A CVE compliant archive of public exploits and corresponding vulnerable software, and a categorized index of Internet search engine queries designed to uncover sensitive information.

BreachLock Attack Surface Discovery & Penetration Testing

BreachLock Attack Surface Discovery & Penetration Testing on SecurityListing: PTaaS platform with continuous attack surface discovery and red teaming

PortSwigger

PortSwigger on SecurityListing: A comprehensive toolkit for web application security testing, offering a range of products and solutions for identifying vulnerabilities and improving security posture.

Informer

Informer offers the unique benefits of combining live asset discovery, vulnerability scanning, and expert penetration testing in a single frictionless attack surface management platform. We continuou

NDAY Security

NDAY Security provide a continuous exploitability platform designed to identify critical vulnerabilities in seconds. Continuous Threat Exposure Management (CTEM)More robust attack surface coverage (t

DEKRA

DEKRA’s promise is to ensure the safety of human interaction with technology and the environment. Protecting people, assets and communities is at the core of what we do helping a variety of clients in

Strobes ASPM

Strobes ASPM on SecurityListing: A threat exposure management platform that unifies security operations by discovering assets, prioritizing vulnerabilities based on risk, and providing guided remediation across an organization's attack surface.

Appknox

Appknox is the world’s most powerful plug-and-play security platform that helps developers, security researchers, and enterprises to build a safe and secure mobile ecosystem. Appknox provide world cl

KFSensor

KFSensor on SecurityListing: KFSensor is an advanced Windows honeypot system for detecting hackers and worms by simulating vulnerable system services.

Cyver Pentest Management Platform

Cyver Pentest Management Platform on SecurityListing: Pentest management platform for reporting, project mgmt & client collaboration

Nmap Cheat Sheet v1.0

Nmap Cheat Sheet v1.0 on SecurityListing: A comprehensive reference guide to Nmap's scripting engine and its various options, scripts, and target specifications.

Pivoting Cheat Sheet

Pivoting Cheat Sheet on SecurityListing: A pocket reference guide providing various options for navigating and pivoting through different environments and situations.

DeepStrike Penetration Testing

DeepStrike Penetration Testing on SecurityListing: Manual penetration testing service simulating real-world attacks

eShard esDynamic

eShard esDynamic on SecurityListing: Platform for chip security testing and binary security analysis

LaBrea

LaBrea on SecurityListing: LaBrea is a 'sticky' honeypot and IDS tool that traps malicious actors by creating virtual servers on unused IP addresses.

Grendel-Scan

Grendel-Scan on SecurityListing: A tool for automated security scanning of web applications and manual penetration testing.

Edgescan

Edgescan offers a continuous security testing and unified exposure management SaaS platform that manages thousands of assets for businesses large and small in a wide variety of industries across the g

SOOHO

See the product page for description, features, and reviews.

Hacken

Hacken is a cybersecurity ecosystem that ensures the safety of IT companies and digital environments. We provide a range of cybersecurity services including security assessments, blockchain security a

Zeroday Ops

Our goal is to lead innovation in autonomous vulnerability scanning, combining scalability, speed, and accuracy to stay ahead of emerging threats and evolving attack surfaces. We’re building a produc

Holm Security

Holm Security make first-class vulnerability assessment available to everyone by taking vulnerability assessment into the next generation as a cloud service. Holm Security VMP (Vulnerability Manageme

Conseal Security

Conseal Security are specialists in mobile app penetration testing. Our expert-led DAST and SAST quickly finds security vulnerabilities in your iOS and Android apps. We do this using meticulously-res

Phone Monitoring Service

Phone Monitoring Service provides cyber security services, ethical hacking services, social media hacking services in the USA, Canada, Europe. As a cyber security company, we offer one-stop phone sec

Mandiant Cybersecurity Consulting

Mandiant Cybersecurity Consulting on SecurityListing: Cybersecurity consulting services covering IR, risk mgmt, and defense ops

Metasploit Unleashed

Metasploit Unleashed on SecurityListing: Free online ethical hacking course covering penetration testing, web app assessments, exploit development, and security operations.

AppUse

AppUse on SecurityListing: A VM for mobile application security testing, Android and iOS applications, with custom-made tools and scripts.

Accedian

Accedian is a leader in performance analytics and end user experience solutions, dedicated to providing our customers with the ability to assure their digital infrastructure. The Accedian management

Zeguro

Zeguro provides complete cybersecurity risk assessment, mitigation and insurance, allowing you to easily manage your cyber risk. Zeguro gives you the tools and training to manage and monitor security

XSSer

XSSer on SecurityListing: Automatic tool for pentesting XSS attacks against different applications

ACROS Security

ACROS Security is a leading provider of security research, real penetration testing and code review for customers with the highest security requirements. Our in-depth security research pushes the boun

ControlCase Continuous Compliance Solution

ControlCase Continuous Compliance Solution on SecurityListing: Continuous compliance monitoring and management for PCI DSS, ISO, SOC, HITRUST

Faraday All-in-One

Faraday All-in-One on SecurityListing: All-in-one platform for vuln mgmt, red team ops, and attack surface mgmt

PentesterLab Master Advanced Web Hacking

PentesterLab Master Advanced Web Hacking on SecurityListing: Online platform for web app security training via hands-on labs and code review

Green Bone Web App Scanning

Green Bone Web App Scanning on SecurityListing: Managed web application security scanning service by Greenbone AG