Top Free Vulnerability Scanner Software - Page 5

Hosted Security Scanners

Cloud-native vulnerability scanning platform that eliminates the need for expensive, time-consuming infrastructure management. We provide security teams with instant deployment and effortless scalability to continuously scan external assets.

Average Rating: 5.0/5.0

Total Reviews: 1

Mageni

Mageni is a vulnerability scanning and vulnerability management solution that empowers use to find, prioritize, remediate and manage vulnerabilities before they are exploited by hackers.

Average Rating: 4.0/5.0

Total Reviews: 1

Panoptic Scans - Network and Application Vulnerability Scans

Panoptic Scans is a hosted vulnerability scanning platform designed to bolster cybersecurity for businesses by offering automated, comprehensive network and application vulnerability scans. Our platform empowers users to schedule vulnerability scans - daily, weekly, monthly, or annually - to ensure compliance with stringent regulations like SOC 2, HIPAA, ISO 27001, NIST 800-53, CMMC, and GDPR. Leveraging powerful tools such as OpenVAS for network vulnerabilities, OWASP ZAP for application security, and Nmap for port scanning, Panoptic Scans identifies weaknesses like unpatched software, misconfigurations, and open ports that could be exploited by cyber threats. With features like email notifications, detailed scan reports, and a user-friendly API, it simplifies vulnerability management, making it ideal for SaaS companies, security teams, and agile development environments aiming to safeguard sensitive data and maintain robust compliance effortlessly.

Average Rating: 5.0/5.0

Total Reviews: 1

Prelude Security

Prelude helps security and IT teams continuously validate that their security controls are fully deployed, optimally configured, and working as intended. Through read-only, API integrations to your existing tools like EDR, IAM, email security, MDM, vulnerability management, and others, Prelude drives visibility across controls and identifiese critical gaps and misconfigurations in your environment. With automated control assessments mapped to leading frameworks like MITRE ATT&CK and NIST, Prelude turns otherwise siloed and fragmented security data into clear visibility, actionable insights, and a measurable assurance of your security posture.

Average Rating: 5.0/5.0

Total Reviews: 1

PT Application Inspector

PT Application Inspector™ (PT AI™) is a comprehensive source code analysis tool that offers protection for web applications of any scale. Its holistic approach combines the advantages of static, dynamic, and interactive analysis to maintain application security throughout every stage of development—from the very first line of code to the go-live.

Average Rating: 5.0/5.0

Total Reviews: 2

Scanely

Scanely is a dynamic QR code platform built for businesses that use print marketing. Founded in 2026 and built on Cloudflare's global edge network, Scanely serves small businesses, restaurants, retailers, and marketing agencies worldwide. The platform lets users create dynamic QR codes that track every scan in real time — capturing city-level location, device type, browser, OS, referrer, and time of day. Unlike static QR codes, destinations can be changed anytime without reprinting. Features include an interactive scan map with city-level pins, A/B testing with weighted traffic distribution, UTM parameter auto-append, campaign tags, branded PDF and CSV report exports, custom QR styling with logos and gradients, password protection, and scheduled redirects. Scanely solves a simple problem: businesses spend money on flyers, posters, packaging, and menus but have no way to measure which materials actually drive customers. With Scanely, every printed piece becomes a trackable marketing channel with real-time analytics, so businesses can stop guessing and start optimizing their offline campaigns.

Average Rating: 5.0/5.0

Total Reviews: 1

SCANOSS

SCANOSS is the industry-leading open source software intelligence provider, offering the largest database of open source information available. SCANOSS delivers cutting-edge tools and services that help businesses and developers detect, manage, and secure their open source components. By identifying license obligations, security vulnerabilities, and other risk concerns, SCANOSS ensures that organisations can harness the power of open source safely and securely throughout the development pipeline.

Average Rating: 4.3/5.0

Total Reviews: 2

Securitystatus

SecurityStatus.io is a domain security assessment and external attack surface monitoring platform that evaluates the internet-visible security posture of websites and domains. It is designed for security teams, IT and DevOps teams, and agencies that need an external view of domain configuration and exposure without installing agents on scanned systems. SecurityStatus.io runs 40 automated checks grouped into four categories and summarises results as a 100-point score or letter grade (A+ to F), with category-level scoring showing how each area contributes to the overall grade. The four check categories are: Encryption and SSL – certificate validity and expiry, TLS protocol and cipher configuration, certificate transparency signals, HTTPS redirect behaviour, and SSL coverage across common subdomains DNS and Email Security – domain and email controls including SPF, DKIM, DMARC, MTA-STS, TLS reporting records, BIMI, DNSSEC, and CAA records Headers and Web App – HTTP security headers and related browser-facing configuration signals Infrastructure and Intelligence – open ports, subdomain takeover indicators, CVE exposure signals, exposed secrets, and dark web exposure monitoring Scans are initiated by entering a domain name and evaluating publicly accessible information. Results are presented as category scores and issue-level findings grouped by severity, with remediation guidance provided so teams can address specific gaps and verify fixes by rescanning. The platform supports repeat scans and scan history for tracking changes over time. Additional capabilities include scheduled scans, email alerts on findings, PDF security reports, and an embeddable security status widget. Common use cases include baseline assessments during onboarding, periodic external security reviews, verification after DNS, hosting, certificate, or application changes, and producing evidence for security questionnaires and audit requests that depend on externally verifiable configuration checks.

Average Rating: 5.0/5.0

Total Reviews: 1

Secyour App

Secyour is an online vulnerability scanner that uncovers the vulnerabilities in your website to mitigate the risks of data breaches.

Average Rating: 5.0/5.0

Total Reviews: 1

Sn1per Professional

Sn1per Professional is an all-in-one offensive security platform that provides a comprehensive view of your internal and external attack surface and offers an asset risk scoring system to prioritize, reduce, and manage risk. With Sn1per Professional, you can discover the attack surface and continuously monitor it for changes. It integrates with the leading open source and commercial security testing tools for a unified view of your data.

Average Rating: 4.5/5.0

Total Reviews: 1

XSignal.io Online Vulnerability Scanner

XSIgnal.io is a new cloud-based vulnerability scanner of the external network infrastructure perimeter that can scan any type of resources / hosts / websites/subnet in just 15 minutes

Average Rating: 5.0/5.0

Total Reviews: 1

CapaOne

CapaOne is a cloud-based endpoint management platform that consolidates the work IT teams normally spread across four to six separate tools. One console, one agent. Application Manager automates third-party application updates and deployment. Privilege Manager removes standing local admin rights and grants just-in-time elevation through Entra ID groups. Provision Manager handles bare-metal OS deployment and vendor-certified, model-aware driver orchestration. Security Monitor maps CVEs to the endpoints they actually affect and prioritizes by exploitability. Experience Monitor tracks device reliability. Mobile Manager covers enrollment, configuration, and app delivery across iOS, iPadOS, and Android. Built for organizations of 200 to 1,000 employees with IT teams of 5 to 20 people. Deployment takes days, not months, with no implementation consultants required. CapaOne is a complete endpoint management platform — designed to work with Microsoft Intune, or entirely without it. Developed by CapaSystems A/S, a Danish software company founded in 1996 with more than 30 years in endpoint management. Danish-built and EU-hosted, with no transfer of endpoint data to US jurisdiction. GDPR-first, NIS2-aligned posture.

CVE Scan

CVE Scan is a vulnerability monitoring and remediation tool for embedded Linux and Zephyr systems. It helps device manufacturers detect and monitor CVEs to ensure cybersecurity compliance (Cyber Resilience Act) thanks to advanced filtering techniques to reduce false positives and visual dashboards.

EdgeWatch Attack Surface Management Platform

Edgewatch is an Attack Surface Management Platform that assists companies in discovering, monitoring, and analyzing devices accessible from the Internet. Edgewatch continuously scans public IP addresses to reveal a digital footprint, offering an external perspective of the online infrastructure.

Enclave

Enclave is a modern network segmentation platform that combines – access control, asset inventory, encryption and zero trust network access – to create a breakthrough microsegmentation solution that prioritizes both IT and cybersecurity’s highest level needs. Enclave is purpose-built to simultaneously secure and segment your networks. Limit the damage a bad actor can do by decreasing the digital square footage they can explore. Easily implement access controls for employees, support staff, and third party vendors while never disrupting current operations.

Average Rating: 5.0/5.0

Total Reviews: 1