Best Vulnerability Scanner Software - Page 14

NESS

NESS (Network Environment Scanning and Security), focuses on developing software to help companies prevent and predict cyberattacks and failures within their technological infrastructure.

Next-Gen Secret Scanning

Astrix Security's Next-Gen Secret Scanning solution is designed to secure and manage exposed secrets—such as API keys, tokens, and other machine credentials—across diverse cloud environments. By providing comprehensive visibility and rich contextual insights, it enables organizations to identify, prioritize, and remediate secret exposures efficiently, ensuring business processes remain uninterrupted.

Nextron Systems

We Detect Hackers. Our signature database with more than 17,000 hand crafted and high quality rules is focused on APTs (advanced persistent threats), their tool sets, scripts and malware.

Noetic Platform

Noetic’s full-stack visibility and effective controls monitoring empowers enterprises to see the full picture and truly understand significance of relationships between entities, so you can identify gaps and continuously improve efficacy. Find out what you can do with Noetic.

NoxScan

Scan all 65,535 TCP ports daily, not just the top 1,000. NoxScan uses eBPF + masscan for high performance port discovery, ZGrab2 for service enrichment, and Nuclei for vulnerability detection. AI filters false positives and maps findings to CVEs with proper severity scores. Auto discovery of your external attack surface. SOC 2 and ISO 27001 audit ready PDF reports out of the box. From €10/mo. 30 day free trial, no credit card needed.

Nsauditor Network Security Auditor

Nsauditor is a powerful network security auditing tools suite designed for network auditing, network scanning, network monitoring, detecting vulnerabilities and more.

N-Stalker

N-Stalker Web Application Security Scanner X is a web security assessment solution for web applications.

Olimpio Security

Olimpio is an external vulnerability scanner built for UK small businesses. It scans your domain for security weaknesses — open ports, missing email authentication records, expired SSL certificates, HTTP security headers, exposed API keys, and known software vulnerabilities — and explains every finding in plain English with clear remediation steps. Most vulnerability scanners are built for enterprise security teams with technical staff to interpret the results. Olimpio is different. Results are explained in plain English so business owners and non-technical managers can understand exactly what is wrong and how to fix it. Key features: external port scanning (standard and deep mode), DNS and email security checks (DMARC, SPF, DKIM), SSL certificate monitoring, HTTP security header analysis, GitHub secrets scanning for exposed API keys, Cyber Essentials control mapping (CE1–CE5), AI-generated plain-English finding explanations, PDF security reports, and security score tracking over time. Free tier available. Starter plan from £49/month.

On-Premises Scanning

Ostorlab On-Premises Scanning brings AI-powered security testing and Agentic Deep Scans into private environments. Organizations can test private mobile and web applications, APIs, networks, and source code using scanner nodes deployed in their own infrastructure. Staging, development, and restricted systems remain behind existing firewalls or VPN controls, while teams create scans, monitor activity, review findings, and manage remediation through the Ostorlab platform. Extend continuous security testing to private environments without making sensitive systems publicly accessible, while supporting internal security policies and compliance requirements.

Oversecured

Enterprise vulnerability scanner for Android and iOS apps. It offers app owners and developers the ability to secure each new version of a mobile app by integrating Oversecured into the development process.

Oxeye Application Security Platform

Oxeye is an application security solution that was developed to address the unique architecture of cloud native applications. We combine static analysis with runtime flow tracing and infrastructure analysis. Using this multilayered approach, we provide a contextual analysis of vulnerabilities, and prioritize them based on their severity. For greater insights, we report whether third party packages are loaded or not, show infrastructure configuration, and graphically show users the vulnerable flow from the internet to a particular line of code, for quicker remediation. With Oxeye, false positives, and false negatives, become a thing of the past. Installation generally takes less than 5 minutes, and does not require changes to the code or the deployment of any software packages. All that’s required is the deployment of a container within your environment. Once running, Oxeye will automatically scan the environment and provide all of the analysis on its own.

PRISM Recon

PRISM Recon watches what your company exposes to the internet, so your team doesn't have to. Add your domains and PRISM checks them every week, automatically. There's nothing to install or maintain, and you only hear from us when something changes, like newly exposed services, expiring certificates or weakened email settings. Every scan comes with a report that's already written: plain-English findings, a single risk score, prioritized fixes, and a clear view of what changed since the last scan. It's ready in seconds to hand to your team, leadership or stakeholders, and MITRE ATT&CK mapping is included in every report. PRISM fills the gap between pen tests and audits. New exposures show up within a week, not at next year's assessment. It also gives you an independent way to check your vendors' work and catch assets a hosting provider or IT partner left exposed by accident. Scanning is non-intrusive: no exploits, no login attempts, and nothing is changed on your systems. Data is encrypted, and full reports are kept for 60 days. MSPs and MSSPs can use it across client domains too. Start a 14-day free trial: 3 full scans, no credit card.

Quokka Q-mast

Designed for app development, Q-mast embeds security directly into your workflow to identify security, privacy, and compliance risks before the mobile app is released. With a design tailored for DevSecOps workflows, Q-mast supports continuous, automated security testing that aligns with tools like Jenkins, GitLab, and GitHub. Q-mast capabilities: • Automated scanning in minutes, no source code needed • Analysis of compiled app binary, regardless of in-app or run-time obfuscations • Precise SBOM generation and analysis for vulnerability reporting to specific library version, including embedded libraries • Comprehensive static (SAST), dynamic (DAST), interactive (IAST), and forced-path execution app analysis • Malicious behavior profiling, including app collusion • Checks against privacy & security standards: NIAP, NIST, MASVS

Raven.io

Runtime Application Protection | Stop Exploits Before They Run Raven protects applications at runtime — the layer where attacks actually happen. Whether a CVE exists or not. 70% of attacks arrive with no CVE at time of exploitation. WAFs see traffic but not execution. EDR sees processes but not library behavior. SCA catches known CVEs but misses everything else. Traditional security tools are blind to what is actually executing inside your applications — and that is where modern attacks live. Raven closes that gap. Raven gives security teams unprecedented visibility into how applications, libraries, and functions actually behave in production — without code changes, code injection, or application restarts. See exactly which libraries are executing, how they chain together, and whether that behavior is legitimate or malicious. What Raven does: Runtime ADR — Detect and block application-layer attacks including CVE-less exploits, supply chain compromises, and AI-generated threats at the point of execution. Runtime SCA — De-prioritize up to 99% of CVE noise by identifying which vulnerable libraries are actually executing in production versus present but dormant. Runtime AI-DR — Discover, monitor, and control every AI agent operating in your environment. Runtime Gatekeeper — Predict and block dangerous deployments before they reach production. Deployment: Kubernetes-native. Single Helm chart. No code changes. No restarts. Near-zero performance impact. Supports Java, Python, Node.js, Go, Ruby, PHP, and all JVM-based languages. Any cloud. Linux kernel 4.18+.

RedHunt Labs ASM Platform

RedHunt Labs is a 360º Attack Surface Management platform that stands out by offering an unparalleled and all-encompassing solution. Our platform goes beyond traditional host and subdomain discovery, extending its reach to encompass a vast array of assets, including third-party SaaS clouds, Docker images, GitHub repositories, Postman collections, and more. With RedHunt Labs ASM Platform, an organization can - continuously track their exposure on the internet - keep an eye on External Supply Chain risks - manage vendor and subsidiary risk - find security issues before threat actors do.

Average Rating: 4.8/5.0

Total Reviews: 6