Best Vulnerability Scanner Software - Page 18

How Many Vulnerability Scanner Software Products Does G2 Track?

Total Products under this Category: 295

Category Stats (Nov 2026)

  • Average Rating: 4.59/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: CybaOps (+4.75%) - Among all products in this category, CybaOps recorded the largest rating increase compared to last month

Last updated: November 01, 2026

How Does G2 Rank Vulnerability Scanner Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 8,200+ Authentic Reviews
  • 295+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Vulnerability Scanner Software

G2 Grid® for Vulnerability Scanner Software plotting products by satisfaction and market presence

Highlighted products: Wiz, Aikido Security, CrowdStrike Falcon Cloud Security, Tenable Nessus, Tenable Vulnerability Management, Orca Security, Astra Pentest, and Intruder.

Underlying data: [Grid® JSON](https://www.g2.com/categories/vulnerability-scanner/grids.json?focus%5B%5D=wiz-wiz&focus%5B%5D=aikido-security&focus%5B%5D=crowdstrike-falcon-cloud-security&focus%5B%5D=tenable-nessus&focus%5B%5D=tenable-vulnerability-management&focus%5B%5D=orca-security&focus%5B%5D=astra-pentest&focus%5B%5D=intruder)

SECURITY by HTTPCS

Detect security flaws in your website or web application and avoid being hacked. HTTPCS Security puts Machine Learning at the service of your cyber security to protect your site against hacking and data leaks.

Who Is the Company Behind SECURITY by HTTPCS?

SecurityMetrics HIPAA Compliance Solutions

SecurityMetrics helps you identify which HIPAA requirements apply to your organization and guides you through HIPAA compliance. SecurityMetrics unmatched support helps you every step of the way on your path towards HIPAA compliance. When you partner with SecurityMetrics, you will love our detailed work and world-class support.

Who Is the Company Behind SecurityMetrics HIPAA Compliance Solutions?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works

Sentinelleai

Sentinelleai is a security platform that reads your repositories, web targets, cloud accounts and smart contracts with independent analyzers, then keeps watching them on a schedule. Findings come with the remedy or the concrete path that reaches them: an exact version to pin, a taint path from source to sink, a transaction hash for contract issues. Scheduled monitors raise alerts on new CVEs in your scope, on-chain administrative events and bytecode changes. Auto-pause, once you arm it, can send a single pause transaction for a contract you own. An append-only, hash-chained evidence ledger records what was seen, what was reported and what you did, and a control map ties that evidence to frameworks such as SOC 2 Type II. Conditions of use: https://sentinelleai.app/terms

Who Is the Company Behind Sentinelleai?

Skilled Scan

SkilledScan is an advanced vulnerability scanning service that uses the latest technology to identify potential security weaknesses in your website. Our expert team provides you with a comprehensive technical report and executive summary, explaining any vulnerabilities in simple language so that you can easily understand the issues and take appropriate action while keeping everything affordable

Who Is the Company Behind Skilled Scan?

SniffPup

SniffPup is a free, passive security scanner for apps built with Lovable, Bolt, Cursor, Replit and v0. Paste a live URL and it runs about 15 checks — exposed API keys, public .env and .git files, missing security headers, Supabase and Firebase exposure — and explains the fixes in plain English. It never sends attack traffic. It also runs as a hosted MCP server for Claude Code and Cursor.

Who Is the Company Behind SniffPup?

SolidityScan

SolidityScan is a cloud-based platform designed to detect security vulnerabilities in Solidity smart contracts efficiently. It supports scanning deployed contracts and code repositories across major blockchain ecosystems such as Ethereum, Binance Smart Chain, Polygon, Avalanche, and more. The tool generates detailed audit reports with actionable remediation advice and provides a security score to help developers assess and improve their contract safety. SolidityScan integrates smoothly into development workflows via APIs, SDKs, and Visual Studio Code extensions, facilitating continuous security monitoring and management. Key Features: - Automated Smart Contract Audits: Rapidly identifies over 130 known vulnerabilities and code anti-patterns to streamline the security review process. - QuickScan and ThreatScan Modes: Offers a fast security check for deployed contracts and an in-depth analysis mode for thorough vulnerability detection. - Multi-Chain Support: Supports scanning on Ethereum, Binance Smart Chain, Polygon, Avalanche, Fantom, XDC, Rootstock, and other blockchain networks. - Comprehensive Security Reports: Generates detailed reports highlighting vulnerabilities, security scores, and recommended fixes for transparency and risk mitigation. - Seamless Integration: Provides APIs, SDKs, and Visual Studio Code extensions to embed security scans into development pipelines and GitHub repositories. - Organization and Collaboration Tools: Enables team management with role assignments and resource sharing without requiring all members to have active plans. Primary Value: SolidityScan addresses the critical need for secure smart contract development by offering an automated, efficient, and comprehensive solution for vulnerability detection and remediation. By integrating seamlessly into existing development workflows and supporting multiple blockchain networks, it empowers developers and organizations to proactively identify and fix security issues, thereby enhancing the overall safety and reliability of decentralized applications.

Who Is the Company Behind SolidityScan?

StaticSpider

Security platform for code, cloud, containers, and web. StaticSpider scans code (secrets, SAST, dependencies, SBOM), containers, and cloud configurations, runs pentest checks and AI code analysis, and adds device and firewall protection with SLAs and reports. Every finding stays pending until a person validates it; nothing is auto-submitted. Free passive website security check at staticspider.com/webscan.

Who Is the Company Behind StaticSpider?

Strobes RBVM

Strobes RBVM simplifies vulnerability management with its all-in-one platform, streamlining the process of identifying, prioritizing, and mitigating vulnerability risks across various attack vectors. Through seamless automation, integration, and comprehensive reporting, organizations can proactively enhance their cybersecurity posture. Strobes Vulnerability Management software goes beyond the capabilities of a standalone vulnerability scanner by aggregating from multiple sources, correlating with threat intel data and prioritising issues automatically. 1. End-to-End Lifecycle Management 2. Threat Intelligence 3. Workflow Automation 4. Integrations 5. Remediation tracking 6. Adaptation to New Threats

Who Is the Company Behind Strobes RBVM?

The Columbus Collaboratory Vulnerability Management Solution

The Columbus Collaboratory Vulnerability Management Solution provides a 360-degree, single-console view via a managed service that helps organizations make informed business decisions and mitigate threats. Rather than staff an expensive threat-intelligence team, the Columbus Collaboratory Vulnerability Management Solution affordably delivers the knowledge, recommendations, and service of a threat-smart team. The Columbus Vulnerability Management Solution features allow you to: • Access Trending Threats: Maintain ongoing situational awareness of threats as they relate to known vulnerabilities through trending threats and CVE® (common vulnerability exposures) lists. • Break Down Vulnerabilities: Effectively understand your vulnerabilities by an asset, by application, and by scan— as well as how they map to frameworks, from something granular like CWE™ (common weakness enumeration), to something as specific as MITRE ATT&CK™ and NIST. • Ingest Scheduled Scans: Generated reports allow you to frequently and continuously monitor changes. • Manage Exceptions: Discover what host, application, and vulnerability-type exceptions are expiring by tracking and reporting capabilities. Your team can resolve tracked exceptions through data cleaning, maintenance, and mitigations. • Monitor Your Risk Score: Evaluate your vulnerabilities, discovered assets, and applications based on an assigned risk score. • Perform Custom Tagging: Tailor your filtering and reporting with host, application, and vulnerability tagging. • Run Analytics and Visualizations: Immediately access easy-to-reference charts and graphs that communicate your organizational security posture. Compare scan data to track progress and new changes. • Tap Into Our Security Expertise: We manage your external and/or internal scanning needs and provide expert analysis on prioritization, as well as convey this to your leadership team(s) through progress templates.

Who Is the Company Behind The Columbus Collaboratory Vulnerability Management Solution?

TotalHeal VulnSight

TotalHeal VulnSight is the Vulnerability Management product of TotalHeal, the security platform made in India by Freaquer Corporation Private Limited. Know which installed software carries a known vulnerability, and fix the most dangerous first. It is managed from the TotalHeal console together with the other TotalHeal products, under one account and one bill. TotalHeal is available as a cloud service and for on-premises deployment. Every organisation can start a 30-day free trial from the console.

Who Is the Company Behind TotalHeal VulnSight?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated April 10, 2026