Sign in ReviewWrite a review

Security scanning

Find vulnerabilities in code and apps.

10 tools

Listed alphabetically. A tool is ranked by its reviews once it has 3.

Security scanning tools compared
Tool	Reviews	Lowest paid plan	Free plan	Free trial	Public API	Runs on	Main features
Aikido SecurityContinuous, autonomous security that gets developers back to building.	ReviewsNone yetWrite one for Aikido Security	Lowest paid plan$350per monthBasic, as of November 14, 2026	Free planYes	Free trialNot confirmed	Public APIYes

From each tool's own website. “Not confirmed” means we couldn't confirm it there, not that the tool doesn't have it. Each tool's page says when its facts were checked.

Missing one you use? Add a tool and write the first review.

How this ranking works

A tool gets a rating after 3 published reviews. Rated tools are ordered by their average rating, then by how many reviews they have. Vendors can't pay to change their position.

Burp Suite DASTDAST with pentester depth, using the same scanning engine as Burp Suite Professional.	ReviewsNone yetWrite one for Burp Suite DAST	Lowest paid planNot confirmed	Free planNot confirmed	Free trialNot confirmed	Public APIYes	Runs onWindows, Linux, Kubernetes	Main features Modern web crawler API scanning Same engine as Pro

DetectifyExternal attack surface and application security scanning, built by ethical hackers.	ReviewsNone yetWrite one for Detectify	Lowest paid plan€2,500Standard, as of November 14, 2026	Free planYes	Free trial2 weeks	Public APIYes	Runs onNot confirmed	Main features API scanning Surface monitoring Application scanning

HostedScanOnline automated vulnerability scanner to secure firewalls, servers, web applications, and apis.	ReviewsNone yetWrite one for HostedScan	Lowest paid plan$39per month, 5 targets includedBasic, as of November 14, 2026	Free planNot confirmed	Free trialNot confirmed	Public APIYes	Runs onNot confirmed	Main features Multiple vulnerability scanners Attack surface mapping Vulnerability management

IntruderA single platform for AI pentesting, attack surface monitoring, cloud security and vulnerability management.	ReviewsNone yetWrite one for Intruder	Lowest paid plan$239per monthCloud, as of November 14, 2026	Free planYes	Free trial14 days	Public APINot confirmed	Runs onNot confirmed	Main features Attack surface management AI pentesting Continuous vulnerability management

Invicti Web + APIAn end-to-end web security scanner covering web applications, web services and APIs.	ReviewsNone yetWrite one for Invicti Web + API	Lowest paid planNot confirmed	Free planNot confirmed	Free trialNot confirmed	Public APIYes	Runs onCloud hosting	Main features Proof-based scanning API discovery Predictive risk scoring

ProbelyA web application and API vulnerability scanner for agile teams.	ReviewsNone yetWrite one for Probely	Lowest paid planSee plans	Free planYes	Free trial14 days	Public APIYes	Runs onNot confirmed	Main features Web and API scanning Asset discovery Scheduled scans

SemgrepAn extensible developer-friendly application security platform.	ReviewsNone yetWrite one for Semgrep	Lowest paid plan$30per contributor per monthTeams, as of November 14, 2026	Free planYes	Free trialNot confirmed	Public APIYes	Runs onNot confirmed	Main features Code scanning (SAST) Secrets detection MCP server

SnykSnyk secures the code AI writes, the agents it runs, and the apps it builds.	ReviewsNone yetWrite one for Snyk	Lowest paid plan$25per month, starting atTeam, as of November 14, 2026	Free planYes	Free trialNot confirmed	Public APINot confirmed	Runs onNot confirmed	Main features Code scanning (SAST) Open source dependency scanning Container security

SocketSocket blocks malicious packages before they reach your code.	ReviewsNone yetWrite one for Socket	Lowest paid plan$25per dev seat per monthTeam, as of November 14, 2026	Free planYes	Free trialNot confirmed	Public APIYes	Runs onWeb, GitHub	Main features Firewall blocking Reachability analysis Dependency search