Best Vulnerability Scanner Software - Page 11

ArgosX

ArgosX independently checks what your AI app builder missed. It finds the security flaws in apps built with Lovable, Bolt, Replit, v0 or a custom stack, proves how each one happens, and gives you a fix you can paste straight back into your builder. A free scan checks what any visitor can already reach: leaked AI and service keys in your pages and JavaScript bundles, a database readable while logged out, missing security headers, cookies and TLS issues, accessibility, SEO and broken links. Paid scans sign in with a test account and use your app like a customer, testing each role you give them, which is where most real problems hide, such as one user being able to load another user's records. Every report rolls security, functionality, UX, accessibility and performance into one VibeScore with worst-first findings, reproduction steps and a shareable trust card. The Human-Verified tier adds a person on the team for UX and edge cases. ArgosX never enters real payment details or moves real money in your app.

Astra Cloud Vulnerability Scanner

Powered by Astra’s Attack Offensive Security Engine, the Astra Cloud Vulnerability Scanner delivers continuous, comprehensive assessments across AWS, Azure, and GCP. With 400+ dedicated cloud scanning rules tailored for all major cloud providers, it identifies misconfigurations, vulnerabilities, access risks, and compliance gaps with high precision. The scanner is designed to meet and exceed industry standards, including OWASP, CIS Benchmarks, SANS, and more, helping teams secure their cloud environments, stay audit-ready, and prevent breaches before they occur.

AUDIT RÉSIDUEL

Residual Audit scanne n’importe quel site en 90 secondes avec 25+ sources officielles : SSL Labs (Qualys), Shodan, NIST CVE, Google PageSpeed, VirusTotal, HIBP, Mozilla Observatory et plus. Score global sur 100, rapport expert, et email de prospection IA personnalisé généré automatiquement. Fonctionnalités : PDF white-label (logo + couleurs agence), Guardian monitoring hebdomadaire, Prospect Radar (leads par secteur/ville), BYOK IA (Gemini, OpenAI, Anthropic), intégrations Notion/Slack/Webhook. GTmetrix = performance seule à 49$/mois. Pentest-Tools = 269€/mois. Residual Audit combine tout à partir de 9€/mois. Premier audit gratuit, sans carte bancaire. Crédits remboursés automatiquement si échec.

Auto-Remediation

Astrix Security's Auto-Remediation solution streamlines the management of Non-Human Identity (NHI) risks by automating remediation processes across various environments. It offers out-of-the-box policies, customizable workflows, and seamless enterprise integrations to enhance security posture without disrupting business operations.

Axix VulnScan

Barrion

Barrion is a developer-focused platform that helps strengthen web application security by running automated security tests that detect and notify you of potential security issues. Stay ahead of threats with effortless, automated vulnerability detection across all your web apps.

Bionic

Bionic is an agentless Application Security Posture Management (ASPM) platform that provides unique visibility into the security, data privacy, and operational risk of applications running in production at scale. Bionic operates continuously and in real-time at the speed of CI/CD so that no application change, drift, or risk goes unnoticed by security, DevOps, and engineering teams. Bionic is the only solution that provides customers with a complete security posture of their applications, services, dependencies, APIs, and data flows within hybrid cloud production environments.

CapaOne

CapaOne is a cloud-based endpoint management platform that consolidates the work IT teams normally spread across four to six separate tools. One console, one agent. Application Manager automates third-party application updates and deployment. Privilege Manager removes standing local admin rights and grants just-in-time elevation through Entra ID groups. Provision Manager handles bare-metal OS deployment and vendor-certified, model-aware driver orchestration. Security Monitor maps CVEs to the endpoints they actually affect and prioritizes by exploitability. Experience Monitor tracks device reliability. Mobile Manager covers enrollment, configuration, and app delivery across iOS, iPadOS, and Android. Built for organizations of 200 to 1,000 employees with IT teams of 5 to 20 people. Deployment takes days, not months, with no implementation consultants required. CapaOne is a complete endpoint management platform — designed to work with Microsoft Intune, or entirely without it. Developed by CapaSystems A/S, a Danish software company founded in 1996 with more than 30 years in endpoint management. Danish-built and EU-hosted, with no transfer of endpoint data to US jurisdiction. GDPR-first, NIS2-aligned posture.

CAVS

A complete automated tool. Our proprietary software is a vulnerability scanner, penetration tester, asset discovery, attack surface management, remediation and report generating all autonomously allowing you to save on your most valuable asset and cost overage, labor.

Clarity

Insignary Clarity enables proactive scanning of embedded firmware or any binaries for known, preventable security vulnerabilities, and also identifies potential license compliance issues. Clarity uses unique fingerprinting technology, which works on the binary without the source code or reverse engineering, making it simple for companies to take proper, preventive action before the deployment of their products.

Clone Systems Vulnerability Scanning

Clone Systems Vulnerability Scanning is a self-managed scanning platform that covers external networks, internal networks, endpoints through an agent, and authenticated web applications, all from one portal. Clone Systems has been a PCI Security Standards Council Approved Scanning Vendor since 2007, so the scanning engine is tested every year under the PCI Council's ASV program. What you get: - External scanning from cloud-based scanners with nothing to install - Internal scanning with a lightweight physical or virtual appliance (VMware, Hyper-V, VirtualBox, Citrix XEN) - Agent-based scanning for laptops and servers that are not on the network - Authenticated web application scanning behind the login - Credentialed and uncredentialed scans, risk-based prioritization, and audit-ready reports mapped to PCI DSS 4.0.1, HIPAA, SOC 2, NIST 800-53 and CSF, ISO 27001, CIS Controls, GLBA, FISMA, CMMC and GDPR - Free rescans on every package - Exceptions and false positives submitted in the portal are reviewed and approved or rejected within 24 hours and stay tied to the scan - 24/7 technical support - Optional Clone Systems AI Assistant that explains findings and builds a remediation plan, running privately in Clone Systems' own data center so findings never leave the portal How it is sold: every package has a published price and is bought online with no sales call. External scanning starts at $595 a year for 10 IPs, internal at $1,095 for 128 IPs, agent-based at $1,195 for 25 agents, and authenticated web app scanning at $5,995 for 10 applications. The account is ready to use the moment you check out. PCI ASV scanning and automated penetration testing are sold in the same cart, and MSPs and resellers can white-label the platform. Clone Systems is based in Philadelphia with an EU office in Cyprus and has delivered managed security since 1998.

Continuous Vulnerability Scanning

Vulnerability Scanning Module from Helical > Scanning of networks, devices and applications for known vulnerabilities and injection exploits. > Ongoing protection with continuous scanning. > Enhanced, multi-layered result reporting tools simplify both management oversight and IT team remediation. > Results sortable by criticality – plan responses by risk. > Track work-in-progress remediation. > Compare improvements across prior periods. > Optional integration with Helical patch management tools.

CVEFinder

CVEFinder.io is a web-based cybersecurity intelligence and vulnerability scanning platform designed for developers, security professionals, and researchers. The platform automatically detects website technologies by analyzing HTTP headers, HTML, JavaScript, and cookies, then correlates findings with up-to-date CVE information for potential vulnerabilities. CVEFinder.io delivers severity scores (CVSS/EPSS), exploit availability insights, and offers both free and affordable Pro plans, featuring monitoring, email alerts, and exportable reports. With an intuitive online interface and continuous database updates, CVEFinder.io streamlines vulnerability discovery and ongoing tracking, enhancing security workflows for web assets of any size.

CVE Scan

CVE Scan is a vulnerability monitoring and remediation tool for embedded Linux and Zephyr systems. It helps device manufacturers detect and monitor CVEs to ensure cybersecurity compliance (Cyber Resilience Act) thanks to advanced filtering techniques to reduce false positives and visual dashboards.

CVE Scanner

CVE Scanner helps businesses understand and improve the security of their public-facing websites. It combines automated security assessments with clear reporting to highlight potential vulnerabilities, security weaknesses and areas for improvement. Designed for website owners, developers and agencies, CVE Scanner turns technical observations into practical next steps. Reports provide supporting evidence and remediation guidance, helping users prioritise concerns and assess improvements over time. With straightforward, on-demand assessments, CVE Scanner makes website security more accessible without the complexity of a traditional enterprise platform. It provides a practical starting point for understanding external exposure and supporting ongoing security maintenance.