Web Security

Cloud Web Application and API Protection

SafeLine WAF on SecurityListing: SafeLine WAF is an open-source web application firewall that protects web services by filtering malicious HTTP traffic through intelligent semantic analysis and machine learning-based detection.

Dynamic Application Security Testing

Caido on SecurityListing: A lightweight web security auditing toolkit that simplifies security tasks and enhances productivity.

Security Operations

Monkey-Spider on SecurityListing: A crawler-based low-interaction client honeypot for exposing website threats.

Penetration Testing

Green Bone Web App Scanning on SecurityListing: Managed web application security scanning service by Greenbone AG

Dynamic Application Security Testing

N-Stalker on SecurityListing: A web security tool that scans for vulnerabilities and known attacks.

Penetration Testing

OWASP Bricks on SecurityListing: Deliberately vulnerable web application for security professionals to practice attack techniques.

Penetration Testing

PortSwigger on SecurityListing: A comprehensive toolkit for web application security testing, offering a range of products and solutions for identifying vulnerabilities and improving security posture.

Penetration Testing

PentesterLab PRO on SecurityListing: Online platform offering 700+ hands-on web security exercises and training

Penetration Testing

SecGame #1: Sauron on SecurityListing: A Linux-based environment for penetration testing and vulnerability exploitation

Vulnerability Assessment

Burp Suite Professional on SecurityListing: A web application security testing platform that combines manual and automated testing tools for conducting comprehensive security assessments and penetration testing.

Penetration Testing

XSSer on SecurityListing: Automatic tool for pentesting XSS attacks against different applications

Cloud Web Application and API Protection

Impart on SecurityListing: A web application firewall and API security platform that combines API discovery, runtime protection, vulnerability testing, and security posture management.

Vulnerability Assessment

Wapiti on SecurityListing: Web-application vulnerability scanner with extensive coverage of security testing modules.

Network Sandboxing

URL Scan on SecurityListing: A website scanner that provides a sandbox for the web, allowing users to scan URLs and websites for potential threats and vulnerabilities.

Security Scanning

Qualys Web Application Scanning (WAS) on SecurityListing: A cloud-based DAST solution that discovers, inventories, and tests web applications and APIs for security vulnerabilities across diverse environments.

Vulnerability Assessment

AWVS on SecurityListing: A hosted web application security testing tool that enables security researchers to register, activate their accounts, and scan web applications for vulnerabilities.

Vulnerability Assessment

Paros on SecurityListing: A Java based HTTP/HTTPS proxy for assessing web application vulnerability with various useful features.

Vulnerability Assessment

Acunetix Web Vulnerability Scanner on SecurityListing: A tool that automatically audits website security by crawling an entire website and identifying vulnerabilities

Security Scanning

Perisai Web Scanner on SecurityListing: Automated web scanner detecting vulnerabilities and HTTP security headers

API Security

TrustCaptcha on SecurityListing: A privacy-focused CAPTCHA alternative that protects websites from bot attacks using proof-of-work challenges and AI-based detection while maintaining GDPR compliance.

Penetration Testing

bWAPP on SecurityListing: A free and open-source deliberately insecure web application for security enthusiasts, developers, and students to discover and prevent web vulnerabilities.

Penetration Testing

Grendel-Scan on SecurityListing: A tool for automated security scanning of web applications and manual penetration testing.

Email Security Platforms

Internacious Website and Email Security Scan on SecurityListing: Web and email security scanner that checks 16 critical security points in 60 seconds

Penetration Testing

PentesterLab Master Advanced Web Hacking on SecurityListing: Online platform for web app security training via hands-on labs and code review

Vulnerability Assessment

Webhacking.kr on SecurityListing: Korean cyber-security challenge platform for exploiting and defending web application vulnerabilities.

Intrusion Detection and Prevention Systems

BotScout.com on SecurityListing: BotScout.com provides proactive bot detection, screening, and banning through a powerful API.

Vulnerability Assessment

Acunetix Web Vulnerability Scanner Demo Site on SecurityListing: A demonstration site for the Acunetix Web Vulnerability Scanner, featuring intentionally vulnerable PHP code to test web application security.