Best Vulnerability Scanner Software - Page 12

How Many Vulnerability Scanner Software Products Does G2 Track?

Total Products under this Category: 244

Category Stats (Oct 2026)

  • Average Rating: 4.59/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: CybaOps (+4.75%) - Among all products in this category, CybaOps recorded the largest rating increase compared to last month

Last updated: October 26, 2026

How Does G2 Rank Vulnerability Scanner Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 8,100+ Authentic Reviews
  • 244+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Vulnerability Scanner Software

G2 Grid® for Vulnerability Scanner Software plotting products by satisfaction and market presence

Highlighted products: Wiz, Aikido Security, CrowdStrike Falcon Cloud Security, Tenable Nessus, Tenable Vulnerability Management, Orca Security, Astra Pentest, and Intruder.

Underlying data: [Grid® JSON](https://www.g2.com/categories/vulnerability-scanner/grids.json?focus%5B%5D=wiz-wiz&focus%5B%5D=aikido-security&focus%5B%5D=crowdstrike-falcon-cloud-security&focus%5B%5D=tenable-nessus&focus%5B%5D=tenable-vulnerability-management&focus%5B%5D=orca-security&focus%5B%5D=astra-pentest&focus%5B%5D=intruder)

CyberChecker

Security Scanner-Every site gets attacked by bots daily - is yours ready? One Exposed Secret. Total Breach. Bots are probing your site for vulnerabilities right now. One database password. One API key. One outdated plugin. That's all it takes. Don't wait for a breach notification. Get a military-grade security audit in 60 seconds. Know your vulnerabilities before hackers do. INITIATE SCAN READY Target URL example.com or https://example.com Enter any website URL to scan for vulnerabilities START FREE SCAN Free scan shows vulnerability count Get the full report with exact locations + code fixes for $39 (one-time payment) Duration 60s Checks 50+ Cost FREE 2,847 Sites Scanned 94% Had Vulnerabilities 60sec Average Scan

Who Is the Company Behind CyberChecker?

CyberScanner

CyberScanner is a cloud-based, advanced website vulnerability scanner designed to empower business owners and non-technical professionals.

Who Is the Company Behind CyberScanner?

  • Seller: CyberScanner
  • Year Founded: 2014
  • HQ Location: Leeds, GB
  • Twitter: @cyber_scanner
    49 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    32 employees on LinkedIn®

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works

CyCognito

CyCognito is a cybersecurity solution designed to help organizations discover, test, and prioritize security issues across their digital landscape. By leveraging advanced artificial intelligence, CyCognito scans billions of websites, cloud applications, and APIs to identify potential vulnerabilities and critical risks. This proactive approach enables organizations to address security concerns before they can be exploited by malicious actors, thereby enhancing their overall security posture. The target audience for CyCognito includes emerging companies, government agencies, and Fortune 500 organizations, all of which face increasing threats in today's digital environment. These entities require robust security measures to protect sensitive data and maintain compliance with various regulations. CyCognito serves as an essential tool for security teams, providing them with the insights needed to understand their risk exposure and prioritize remediation efforts effectively. One of the key features of the CyCognito platform is its comprehensive scanning capability, which covers a vast range of digital assets. This extensive reach ensures that organizations can identify vulnerabilities across all their online presence, including third-party services and shadow IT. The platform's AI-driven analysis further enhances its effectiveness by automatically assessing the severity of identified risks, allowing security teams to focus on the most critical issues that could lead to significant breaches. In addition to risk discovery, CyCognito offers actionable guidance for remediation, helping organizations to implement effective security measures. The platform provides detailed insights into the nature of the vulnerabilities and suggests specific steps to mitigate them. This feature not only streamlines the remediation process but also empowers organizations to build a more resilient security framework over time. By integrating CyCognito into their cybersecurity strategy, organizations can significantly reduce their risk exposure and enhance their ability to respond to emerging threats. The platform's unique combination of extensive scanning, AI-driven risk assessment, and actionable remediation guidance positions it as a valuable asset for any organization looking to strengthen its security posture in an increasingly complex threat landscape.

Average Rating: 4.3/5.0

Total Reviews: 5

How Do G2 Users Rate CyCognito?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 9.2/10)

Who Is the Company Behind CyCognito?

  • Seller: CyCognito
  • Year Founded: 2017
  • HQ Location: Palo Alto, California, United States
  • Twitter: @CyCognito
    10,296 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    106 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 80% Small, 20% Large

What Do G2 Reviewers Say About CyCognito?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the great customer support from CyCognito, noting quick resolutions and an easy-to-use interface.
  • Users value CyCognito for its ability to identify hidden assets and prioritize risks, enhancing security effortlessly.
  • Users value the continuous monitoring capabilities of CyCognito for detecting threats on external assets.
Cons
  • Users report authentication issues due to false positives, leading to delays and unsatisfactory support responses.
  • Users find the cost of CyCognito to be high, suggesting a need for more affordable options.
  • Users experience false positives in CyCognito, leading to frustration due to poor support response times.
  • Users find the inadequate remediation details insufficient, requiring manual efforts to resolve vulnerabilities.
  • Users find the lack of detailed remediation steps frustrating, requiring them to manually address issues and vulnerabilities.

What Are Recent G2 Reviews of CyCognito?

Data Theorem

RamQuest’s solutions include our fully integrated closing, escrow accounting, imaging, transaction management, esigning, and digital marketplace solutions and are available on-premise or in a hosted environment

Average Rating: 4.0/5.0

Total Reviews: 1

Who Is the Company Behind Data Theorem?

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of Data Theorem?

DeepSurface Risk Analyzer (BYOL)

DeepSurface is a risk-based predictive vulnerability management platform that contextualizes vulnerabilities and chains of vulnerabilities within your unique digital infrastructure, accurately predicting where an attacker could cause the most damage to your business.

Who Is the Company Behind DeepSurface Risk Analyzer (BYOL)?

  • Seller: DeepSurface Security
  • Year Founded: 2013
  • HQ Location: Los Altos, California, United States
  • Twitter: @DeepSurfaceSec
    79 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    168 employees on LinkedIn®

depthfirst

depthfirst is an AI-native security platform offering continuous cyber defense. It reasons through code, infrastructure, and business logic to understand how systems work and build a threat model. That context helps depthfirst find and verify vulnerabilities, prioritize what is exploitable, block malicious dependencies, and help teams remediate security issues. The platform covers three broad areas: Code Security reviews repositories and pull requests for vulnerabilities, secrets, insecure dependencies, and business-logic flaws. It connects findings to application context so security and engineering teams can focus on the issues that matter and fix them in the code. Agentic Pentesting uses autonomous agents to attack running applications like a team of elite security researchers. It supports black-, gray-, and white-box testing for new vulnerability discovery, but can also confirm whether code scan findings are exploitable and replay attacks to verify that fixes work. Dependency Firewall blocks malicious packages before installation to prevent supply chain attacks. It applies a shared security policy at the artifact-repository layer and on managed devices, protecting both people and AI agents. depthfirst routes each task to the best-suited AI model to optimize performance and cost. It also includes dfs-large1, depthfirst’s own frontier cybersecurity model, which performs comparably to frontier general-purpose models on vulnerability detection tasks at a fraction of the cost. depthfirst works with enterprises such as ServiceNow, government agencies, and innovative AI and fintech companies including Lovable, Supabase, Ripple, Listen Labs, fal, and MoonPay.

Who Is the Company Behind depthfirst?

DigitSec S4

DigitSec provides a tool designed to assess the security of Salesforce code and customizations.

Average Rating: 4.5/5.0

Total Reviews: 1

Who Is the Company Behind DigitSec S4?

  • Seller: DigitSec
  • Year Founded: 2017
  • HQ Location: Seattle, US
  • Twitter: @DigitSec_Inc
    106 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    11 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Medium

What Are Recent G2 Reviews of DigitSec S4?

DragonSec

Dragonsec is a SaaS tool for performing vulnerability scans, subdomain discovery, and port scanning. Dragonsec is performed to help SMBs to do this kind of test with competitive prices, with the vision of democratizing vulnerability scanning. Dragonsec helps you to identify and fix potential threats before they become a problem.

Who Is the Company Behind DragonSec?

Echelon

Echelon — your cybersecurity check-up solution. Just like a health check-up prevents illness, our AI-driven solution for ongoing cybersecurity audits prevents cyber threats — before they lead to financial loss or data breaches. Just 5 reasons to choose Echelon: 1. Fix Faster with AI. Our AI tool provides step-by-step guidance to remediate every detected vulnerability. Less routine for your team—more profit for you. 2. Machine Learning Leak Processing. Machine Learning enables Echelon to efficiently process leaked data, ensuring none of your sensitive information is exposed publicly. 3. Quick & Easy Setup. Just enter and confirm your domain or IP. No downloads. No access permissions needed. 4. Automatic Threat Detection. Finds security gaps before attackers do. 5. Echelon Never Sleeps. Audits are performed regularly. 24/7 CVE monitoring — if a new threat emerges, you'll be notified immediately. 3 simple steps to start: - Visit Echelon’s Website and Sign Up - Enter Domain/IP and Choose a Plan - Stay one step ahead of cyber threats – Echelon ensures 24/7 security

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate Echelon?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Echelon?

Who Uses This Product?

  • Company Size: 100% Medium

What Do G2 Reviewers Say About Echelon?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the extra layer of protection provided by Echelon, enhancing their multi-layered security efforts.
  • Users find Echelon adds a reliable extra layer of protection to their existing security measures and risk management strategies.
  • Users value the multi-layered security of Echelon, providing an extra layer of protection and peace of mind.
Cons
  • Users find the technical language complex, which may confuse those not well-versed in the subject.
  • Users find the technical language complex, which may pose a challenge for those less experienced with it.

What Are Recent G2 Reviews of Echelon?

EdgeWatch Attack Surface Management Platform

Edgewatch is an Attack Surface Management Platform that assists companies in discovering, monitoring, and analyzing devices accessible from the Internet. Edgewatch continuously scans public IP addresses to reveal a digital footprint, offering an external perspective of the online infrastructure.

Who Is the Company Behind EdgeWatch Attack Surface Management Platform?

Enclave

Enclave is a modern network segmentation platform that combines – access control, asset inventory, encryption and zero trust network access – to create a breakthrough microsegmentation solution that prioritizes both IT and cybersecurity’s highest level needs. Enclave is purpose-built to simultaneously secure and segment your networks. Limit the damage a bad actor can do by decreasing the digital square footage they can explore. Easily implement access controls for employees, support staff, and third party vendors while never disrupting current operations.

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate Enclave?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Enclave?

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of Enclave?

Eureka DevSecOps

Eureka supports application vulnerability management for teams that need more than raw scanner output. It helps organize findings, show status, connect work to owners, track remediation activity, and preserve the history reviewers and security leaders need to understand what changed over time. It is useful for teams dealing with scanner fatigue, backlog noise, and unclear prioritization. Eureka is the AppSec evidence layer for software teams facing customer security reviews, SOC 2 preparation, or audit pressure. It does not create proof from thin air. It captures and organizes real workflow activity so teams can show what was found, what was fixed, who reviewed it, and what happened over time. The result is a clearer record when reviewers ask for security evidence.

Who Is the Company Behind Eureka DevSecOps?

exposentry

Exposentry is continuous vulnerability monitoring software that identifies and documents external attack surfaces. Built on OpenKAT, it automatically discovers internet-connected domains, systems, and services, scanning for vulnerabilities without requiring hardware or software installation. Using an evidence-first approach, Exposentry records vulnerabilities with forensic documentation. Organizations receive detailed, shareable reports on their digital exposure, digitally sealed for authenticity. The platform operates under GDPR compliance on European infrastructure, ensuring data sovereignty outside the U.S. CLOUD Act. Exposentry supports supply chain security by assessing vendor attack surfaces through dated reports. Complementing penetration testing, it provides continuous visibility rather than single-point assessments. Setup is simple, starting with online registration and DNS verification for same-day operation.

Who Is the Company Behind exposentry?

  • Seller: Hasecon
  • Year Founded: 2012
  • HQ Location: Voorburg, nl
  • LinkedIn® Page: www.linkedin.com
    1 employees on LinkedIn®

External Vulnerability Assessments and Internal Network Assessments

eSecurity, LLC helps small and mid-sized companies identify real security vulnerabilities without the risk that comes with disruptive testing tools. Our assessments — external vulnerability scanning and internal network assessments — are structurally read-only, so unlike many automated pentest and vulnerability management platforms, they cannot cause service interruptions in a client's environment. Engagements are fixed-scope and transparently priced, with no black-box risk scoring and no per-asset upsells. Every assessment includes compliance mapping, a searchable findings database, and prioritized, actionable remediation guidance — delivered through direct access to a senior security consultant rather than a support queue. eSecurity, LLC is built for SMB and mid-market IT teams that want practical, efficient security work that fits how their business actually runs. Categories to select (where offered): Vulnerability Management, Penetration Testing / PTaaS, Attack Surface Management, IT Security Consulting Key features / bullets: External vulnerability assessments (perimeter/internet-facing) Internal network assessments Strictly read-only methodology — no risk of service disruption Compliance framework mapping Fixed-scope, transparent pricing (no upsells) Direct access to a senior consultant (not a support tier) Detailed, prioritized findings reports with remediation guidance Differentiators (if the platform asks "why choose us"): Most competing tools in this space — including well-known automated pentest platforms — carry a documented risk of causing service interruptions during active testing. eSecurity, LLC's assessments are read-only by design, so that failure mode structurally can't happen. Combined with fixed, transparent pricing and direct senior-level access (typical of a solo-consultant model, not enterprise-scale overhead), it's built for SMBs who want senior expertise without enterprise complexity or risk.

Who Is the Company Behind External Vulnerability Assessments and Internal Network Assessments?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated April 10, 2026