Best Vulnerability Scanner Software - Page 15

How Many Vulnerability Scanner Software Products Does G2 Track?

Total Products under this Category: 244

Category Stats (Oct 2026)

  • Average Rating: 4.59/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: CybaOps (+4.75%) - Among all products in this category, CybaOps recorded the largest rating increase compared to last month

Last updated: October 26, 2026

How Does G2 Rank Vulnerability Scanner Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 8,100+ Authentic Reviews
  • 244+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Vulnerability Scanner Software

G2 Grid® for Vulnerability Scanner Software plotting products by satisfaction and market presence

Highlighted products: Wiz, Aikido Security, CrowdStrike Falcon Cloud Security, Tenable Nessus, Tenable Vulnerability Management, Orca Security, Astra Pentest, and Intruder.

Underlying data: [Grid® JSON](https://www.g2.com/categories/vulnerability-scanner/grids.json?focus%5B%5D=wiz-wiz&focus%5B%5D=aikido-security&focus%5B%5D=crowdstrike-falcon-cloud-security&focus%5B%5D=tenable-nessus&focus%5B%5D=tenable-vulnerability-management&focus%5B%5D=orca-security&focus%5B%5D=astra-pentest&focus%5B%5D=intruder)

Red Sift ASM

With Red Sift ASM (Attack Surface Management), you can continuously discover, inventory and manage your business’s critical external-facing and cloud assets. With Red Sift ASM, you: 1) Get complete visibility with a view into your entire attack surface – including assets you didn't know existed; 2) Remediate configuration risks before bad actors can take advantage; 3) Reduce premiums by solving problems before they are visible to your cyber insurer.

Average Rating: 4.0/5.0

Total Reviews: 1

Who Is the Company Behind Red Sift ASM?

  • Seller: Red Sift
  • Year Founded: 2015
  • HQ Location: London, England, United Kingdom
  • Twitter: @redsift
    1,267 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    97 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Do G2 Reviewers Say About Red Sift ASM?

AI-generated summary from verified user reviews

Pros
  • Users value the automated asset detection in Red Sift ASM, enhancing their cybersecurity and network monitoring capabilities.
  • Users find the automation for asset detection in Red Sift ASM invaluable for continuous network security monitoring.
  • Users value the automation testing capabilities of Red Sift ASM for robust asset detection and cybersecurity monitoring.
  • Users find the comprehensive monitoring of Red Sift ASM invaluable for automated asset detection and cybersecurity.
  • Users value the automated asset detection capabilities of Red Sift ASM, enhancing cybersecurity through continuous monitoring.

What Are Recent G2 Reviews of Red Sift ASM?

Resecurity Digital Risk Monitoring Platform

Resecurity's Digital Risk Monitoring Platform, Risk™, is an AI-driven solution designed to automate digital risk management by providing actionable intelligence on significant changes to an organization's security posture. It continuously monitors for threats such as data breaches, compromised credentials, network infections, and other security incidents, enabling proactive defense against cyber threats. Key Features and Functionality: - Comprehensive Risk Evaluation: Conducts in-depth assessments across the entire enterprise ecosystem to identify vulnerabilities and security gaps. - Scalable Monitoring: Capable of monitoring digital footprints of any size on a massive scale, ensuring extensive coverage. - Effective Threat Mitigation: Provides early-warning security notifications and automated daily security posture reports to facilitate timely remediation actions. - Risk Measurement: Assigns daily security scores based on monitored domains, IPs, networks, vulnerabilities, and cloud services, offering a clear overview of the organization's security status. - Risk Assessment: Refines and enriches data points to pinpoint weaknesses and vulnerabilities in digital assets, with updates delivered through reports or emails as new data emerges. - Global Visibility: Utilizes geo-location capabilities to deliver contextual information, identifying low, medium, and high-risk areas for managing infrastructure and network resources. Primary Value and Problem Solved: Risk™ empowers organizations to proactively manage and mitigate digital risks by providing real-time insights into their security posture. By automating the detection of external threats—including account takeovers, botnet infections, business email compromises, cyberespionage, brand reputation abuse, dark web activity, domain squatting, data breaches, and more—the platform enables businesses to identify and address vulnerabilities promptly. This proactive approach helps prevent potential security incidents, safeguarding the organization's assets, reputation, and customer trust.

Who Is the Company Behind Resecurity Digital Risk Monitoring Platform?

Rocket z/Assure Vulnerability Analysis Program (VAP)

Elevate your mainframe’s security posture with Rocket® z/Assure VAP, ensuring your system remains resilient against modern threats while optimizing its performance.

Who Is the Company Behind Rocket z/Assure Vulnerability Analysis Program (VAP)?

  • Seller: Rocket Software
  • Year Founded: 1990
  • HQ Location: Waltham, MA
  • Twitter: @Rocket
    3,532 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    4,417 employees on LinkedIn®

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works

SanctScan

SanctScan is sanctions screening software for small and mid-sized businesses and independent compliance professionals. A single search checks a person or company against every major official sanctions list: OFAC SDN, US Consolidated Screening List, EU Consolidated, UN Security Council, UK Sanctions List, Swiss SECO, Canada GAC, Australia DFAT and Japan MOF. Lists are refreshed daily from the official sources. Fuzzy matching catches aliases, transliterations and partial matches. Every result shows a risk score, the exact list and entry it matched, and is stored in an audit trail you can export as a PDF. Continuous monitoring rescreens saved customers and suppliers after every list update and alerts you by email or webhook. Teams can screen in bulk by CSV upload or integrate through a REST API. Pricing is published: a free plan with 25 screenings a month, and paid plans from $19/month. Sign up and screen in minutes, with no onboarding call or annual contract.

Who Is the Company Behind SanctScan?

ScanLabsAI - Advanced Vulnerability Scanner

ScanLabsAI is an AI-powered website vulnerability scanner built for agencies, MSPs and development teams responsible for security across many client sites. It scans against the OWASP Top 10 for Web, API and LLM applications — the last of which most vulnerability scanners do not cover at all. Alongside conventional web security checks, ScanLabsAI detects leaked AI and LLM provider API keys, exposed agentic-tool configuration and GraphQL introspection left enabled: the failure modes that appear most often in sites built quickly with AI coding tools. Each deep scan runs more than 40,000 vulnerability checks, covering CVE detection, SSL/TLS analysis, security header configuration, DNS settings and common web application weaknesses. Connected GitHub repositories are scanned as well as the live site, surfacing hardcoded secrets and vulnerable dependencies that never appear in a black-box scan. Findings come with AI-written remediation guidance explaining what to change and why. Scanning is non-intrusive and read-only, so it never modifies or disrupts the target site. Deep scans complete in under twenty minutes, run in the background with notifications, and can be exported as PDF reports. Vulnerability reports are never stored. For agencies and MSPs, the Agency plan covers up to 50 client websites for £249 per month — under £5 per site — with white-label PDF reports delivered under your own brand, team access with role-based permissions, and no long-term contract. A 14-day free trial is available without a credit card. Individual users can scan without a subscription: the first scan of every website is free, and further scans run on AI credit packs starting at £9.99. ScanLabsAI also provides a native Model Context Protocol (MCP) server, published in the official MCP Registry, so scans can be run directly from Claude and other MCP-compatible AI assistants — either through the hosted endpoint or the @scanlabsai/mcp-server npm package.

Who Is the Company Behind ScanLabsAI - Advanced Vulnerability Scanner?

Secuna Response

SECUNA is the first and only Cybersecurity Testing Platform in the Philippines helping Startups and SMEs by connecting them to the most advanced and highly-vetted cybersecurity professionals in the world to simulate cyber-attacks and find security flaws that real-world malicious hackers can exploit and leverage to gain access to IT systems.

Who Is the Company Behind Secuna Response?

  • Seller: Secuna
  • Year Founded: 2017
  • HQ Location: Taguig, PH
  • LinkedIn® Page: www.linkedin.com
    23 employees on LinkedIn®

Securelic

Securelic is an open source powered vulnerability scanning and external attack surface discovery platform built for modern security teams. It helps organizations continuously identify internet facing assets, uncover security weaknesses across web applications, APIs, networks and SSL/TLS configurations and turn findings into clear, actionable security insight. Designed for teams that need visibility beyond occasional scans, Securelic brings multiple security engines together in one platform to support continuous monitoring, practical reporting and more confident security decision making.

Who Is the Company Behind Securelic?

SECURITY by HTTPCS

Detect security flaws in your website or web application and avoid being hacked. HTTPCS Security puts Machine Learning at the service of your cyber security to protect your site against hacking and data leaks.

Who Is the Company Behind SECURITY by HTTPCS?

  • Seller: HTTPCS by Ziwit
  • Year Founded: 2011
  • HQ Location: Montpellier, FR
  • Twitter: @httpcs
    2,812 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    27 employees on LinkedIn®

SecurityMetrics HIPAA Compliance Solutions

SecurityMetrics helps you identify which HIPAA requirements apply to your organization and guides you through HIPAA compliance. SecurityMetrics unmatched support helps you every step of the way on your path towards HIPAA compliance. When you partner with SecurityMetrics, you will love our detailed work and world-class support.

Who Is the Company Behind SecurityMetrics HIPAA Compliance Solutions?

  • Seller: SecurityMetrics
  • Year Founded: 2000
  • HQ Location: Orem, Utah, United States
  • Twitter: @SecurityMetrics
    3,757 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    288 employees on LinkedIn®

Skilled Scan

SkilledScan is an advanced vulnerability scanning service that uses the latest technology to identify potential security weaknesses in your website. Our expert team provides you with a comprehensive technical report and executive summary, explaining any vulnerabilities in simple language so that you can easily understand the issues and take appropriate action while keeping everything affordable

Who Is the Company Behind Skilled Scan?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated April 10, 2026