Best Vulnerability Scanner Software - Page 13

How Many Vulnerability Scanner Software Products Does G2 Track?

Total Products under this Category: 244

Category Stats (Oct 2026)

  • Average Rating: 4.59/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: CybaOps (+4.75%) - Among all products in this category, CybaOps recorded the largest rating increase compared to last month

Last updated: October 26, 2026

How Does G2 Rank Vulnerability Scanner Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 8,100+ Authentic Reviews
  • 244+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Vulnerability Scanner Software

G2 Grid® for Vulnerability Scanner Software plotting products by satisfaction and market presence

Highlighted products: Wiz, Aikido Security, CrowdStrike Falcon Cloud Security, Tenable Nessus, Tenable Vulnerability Management, Orca Security, Astra Pentest, and Intruder.

Underlying data: [Grid® JSON](https://www.g2.com/categories/vulnerability-scanner/grids.json?focus%5B%5D=wiz-wiz&focus%5B%5D=aikido-security&focus%5B%5D=crowdstrike-falcon-cloud-security&focus%5B%5D=tenable-nessus&focus%5B%5D=tenable-vulnerability-management&focus%5B%5D=orca-security&focus%5B%5D=astra-pentest&focus%5B%5D=intruder)

Fairwinds Insights

Fairwinds Insights provides platform teams all the business and mission critical functionality to make Kubernetes easy for developers to use and self-service. Fairwinds Insights is a SaaS for platform teams to implement standardization and policies that enable developers. Install the Insights agent into a cluster. In minutes, teams can see their cluster health score, dig into issues around security, efficiency and reliability issues. Insights identifies the issues and offers remediation advice to the user. Integrate Insights findings into your existing developer toolbox including GitHub and Jira. Set Automation Rules to automatically create Jira tickets and the Admission Controller to reject any code not in compliance with standards. Use existing out of the box policies based on development practices and create your own based on your organization's opinions.

Who Is the Company Behind Fairwinds Insights?

  • Seller: Fairwinds
  • Year Founded: 2016
  • HQ Location: Boston, US
  • Twitter: @fairwindsops
    1,390 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    56 employees on LinkedIn®

Grego AI

Who Is the Company Behind Grego AI?

  • Seller: Grego AI
  • Year Founded: 2024
  • HQ Location: San Francisco, US
  • LinkedIn® Page: www.linkedin.com
    4 employees on LinkedIn®

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works

Harbor Adapter Clair

The Harbor Adapter Clair is a service that integrates the Clair vulnerability scanner with the Harbor container registry, enabling automated security assessments of container images. By acting as a bridge between Harbor and Clair, this adapter facilitates the identification and reporting of vulnerabilities within container images stored in Harbor, enhancing the security posture of containerized applications. Key Features and Functionality: - Seamless Integration: Connects Harbor with Clair, allowing for streamlined vulnerability scanning of container images. - Automated Scanning: Initiates vulnerability assessments automatically upon image push or on-demand, ensuring up-to-date security evaluations. - Detailed Reporting: Provides comprehensive vulnerability reports, aiding in the identification and remediation of security issues. - Configurable Parameters: Offers customizable settings, such as log levels and server addresses, to tailor the scanning process to specific requirements. Primary Value and User Benefits: The Harbor Adapter Clair addresses the critical need for robust security in containerized environments by automating the detection of vulnerabilities within container images. This integration empowers organizations to proactively manage and mitigate security risks, ensuring the deployment of secure and compliant containerized applications. By providing timely and detailed vulnerability insights, it supports informed decision-making and enhances overall system security.

Who Is the Company Behind Harbor Adapter Clair?

  • Seller: Broadcom
  • Year Founded: 1991
  • HQ Location: San Jose, CA
  • Twitter: @broadcom
    63,909 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    44,602 employees on LinkedIn®
  • Ownership: NASDAQ: CA

Heatena Security

Heatena Security is a risk intelligence platform built for people and organizations that cannot afford to get breached. We don’t just assess your cybersecurity posture — we measure it, pressure-test it, and help you actively reduce real-world risk. At the core of Heatena is the Security Health Check (SHC) — a guided evaluation that identifies your highest-risk vulnerabilities and delivers clear, prioritized action steps to fix them fast. But we don’t stop at assessments. Heatena also runs security behavior simulations to test how users actually respond to threats — revealing the human risk factors that most platforms ignore. Because real security isn’t just about systems — it’s about decisions. Built privacy-first and fully self-service, Heatena gives you: -Instant visibility into your cyber risk -Personalized, step-by-step remediation guidance -Behavioral simulations that expose hidden weaknesses -A practical path to continuously lowering your attack surface No meetings. No unnecessary data collection. No technical background required. Just clarity, control, and measurable risk reduction.

Who Is the Company Behind Heatena Security?

  • Seller: Heatena
  • Year Founded: 2022
  • HQ Location: Remote Based, US
  • LinkedIn® Page: www.linkedin.com
    2 employees on LinkedIn®

HTTPCS Security

Who Is the Company Behind HTTPCS Security?

  • Seller: HTTPCS by Ziwit
  • Year Founded: 2011
  • HQ Location: Montpellier, FR
  • Twitter: @httpcs
    2,812 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    27 employees on LinkedIn®

Infiltrator

Infiltrator is a FREE easy to use, intuitive network security scanner that can quickly audit your network computers for vulnerabilities, exploits, and information enumerations.

Who Is the Company Behind Infiltrator?

Initial Access Intelligence

VulnCheck's Initial Access Intelligence equips organizations with essential detection artifacts to defend against critical initial access vulnerabilities that are either actively exploited or likely to be targeted imminently. These artifacts include Suricata signatures, YARA rules, PCAPs, and private exploit proof-of-concept (PoC) code, enabling security teams to implement defenses promptly and test their systems effectively.

Who Is the Company Behind Initial Access Intelligence?

  • Seller: VulnCheck
  • Year Founded: 2021
  • HQ Location: Lexington, US
  • LinkedIn® Page: www.linkedin.com
    50 employees on LinkedIn®

Invary Runtime Integrity

Invary proactively identifies runtime threats to operating systems. With IP licensed from the NSA, our advanced technology empowers teams to uncover sophisticated threats that deceive and bypass traditional security measures. By validating the integrity of your operating system, Invary returns value back to your existing security investments. Invary's Runtime Integrity Service includes: -Continuous appraisals -Advanced kernel inspection -Runtime Integrity history -Automated kernel release baselining -Support for AWSLinux, CentOS, Debian, Red Hat, Rocky, Alma and Ubuntu -Runs on any virtualization environment including AWS, GCP, or Azure -Stream or pull appraisals via Webhook or API Restore trust and find hidden threats with Invary

Who Is the Company Behind Invary Runtime Integrity?

Luna

Luna is an external vulnerability scanning platform that helps businesses discover and fix security weaknesses across their internet-facing infrastructure. Using 11,000+ security templates, Luna detects CVEs, misconfigurations, and common web vulnerabilities including XSS, SQLi, RCE, and SSRF across websites, servers, and network services. The platform offers four scan modes, Quick, Comprehensive, CVE-only, and Deep, with port scanning across the top 1,000 ports, SSL/TLS certificate analysis, and CVSS-based risk scoring for every finding. Vulnerabilities are mapped to OWASP Top 10 2025 categories with compliance reporting for Cyber Essentials, ISO 27001, SOC 2, PCI DSS, and GDPR. Luna is fully cloud-based with nothing to install. Teams can add domains or IP addresses and run their first scan in under five minutes. Scheduled scans run on custom cron expressions with Slack and email alerts for critical findings. A full REST API supports CI/CD pipeline integration. The platform includes vulnerability lifecycle management to track findings from Open to Acknowledged to Fixed, with false positive marking and remediation guidance. Reports export as PDF, CSV, or JSON. Luna is designed for lean IT teams, startups, and SMEs that need enterprise-grade vulnerability scanning without enterprise pricing or complexity. Plans start at $249/month for up to 50 targets, with a 14-day free trial.

Who Is the Company Behind Luna?

  • Seller: Luna
  • Year Founded: 2025
  • HQ Location: London, GB
  • LinkedIn® Page: www.linkedin.com
    1 employees on LinkedIn®

Mandiant Ransomware Validation

Ransomware Protection Ransomware and multifaceted extortion have become top cyber security threats for organizations of all shapes and sizes.

Who Is the Company Behind Mandiant Ransomware Validation?

  • Seller: Google
  • Year Founded: 1998
  • HQ Location: Mountain View, CA
  • Twitter: @google
    31,899,995 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    301,144 employees on LinkedIn®
  • Ownership: NASDAQ:GOOG

MetaDefender Drive

MetaDefender Drive boots directly from a USB port to scan laptops and servers before the operating system loads. It performs deep forensic analysis of files, memory, drivers, and system components, all without installing software. Detailed reports identify malware, vulnerabilities, and integrity issues, pinpointing exactly what needs remediation.

Who Is the Company Behind MetaDefender Drive?

  • Seller: OPSWAT
  • Year Founded: 2002
  • HQ Location: Tampa, Florida
  • Twitter: @OPSWAT
    7,257 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1,185 employees on LinkedIn®

Monarc

Monarc helps small and mid-sized businesses in the UAE and India stay secure, stay compliant, and never miss a customer call — all from one place. Most small teams don't have a security team, a compliance officer, or a receptionist. Monarc gives them all three in software form. What Monarc does Find security problems before attackers do Monarc scans your websites, apps, and internet-facing systems for known weaknesses. You get a clear list of what's wrong, how serious it is, and what to fix first — written in plain language, not security jargon. Scans run on a schedule, so you're not relying on someone remembering to check. See your security posture at a glance A single dashboard shows how your security is doing over time: what's been fixed, what's still open, and where the real risk sits. Useful for founders and IT managers who need an answer fast, and for showing customers or partners that you take security seriously. Make compliance less painful Monarc turns security work into the evidence you need for audits and customer security reviews. Instead of digging through spreadsheets and screenshots before every questionnaire, the proof is already collected and organised. Built around practices aligned with ISO 27001. Answer every call with Monarc Voice Monarc Voice is a smart phone receptionist that picks up when your team can't. It answers questions, takes down caller details, books appointments, and passes the important calls to a human. It speaks English, Arabic, Hindi, Gujarati, Malayalam, Tamil, Telugu, and Kannada — so you can serve customers across the Gulf and India in the language they're comfortable with. Every call is logged, so nothing gets lost. Keep track of customers (in development) Monarc's own CRM connects to Voice, so a call can turn into a contact, a lead, and a deal without anyone typing it in. It also works with the CRM you already use. Who Monarc is for Small and mid-sized businesses in the UAE and India — clinics, agencies, law firms, real estate, retail, professional services, and growing tech companies. Anyone who needs enterprise-level security and customer coverage without hiring an enterprise-sized team. Why teams choose Monarc - Built for the region, not adapted for it — Gulf and India first - Plain-language results anyone can act on, not reports only experts understand - Security, compliance, and customer calls in one platform instead of four separate tools - Set up in minutes, not months

Who Is the Company Behind Monarc?

  • Seller: Monarc
  • Year Founded: 2026
  • HQ Location: Ras al khaimah, AE
  • LinkedIn® Page: www.linkedin.com
    1 employees on LinkedIn®
Lauren Worth
LW
Researched and written by Lauren Worth
Updated April 10, 2026