Best Vulnerability Scanner Software - Page 8

How Many Vulnerability Scanner Software Products Does G2 Track?

Total Products under this Category: 244

Category Stats (Oct 2026)

  • Average Rating: 4.59/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: CybaOps (+4.75%) - Among all products in this category, CybaOps recorded the largest rating increase compared to last month

Last updated: October 26, 2026

How Does G2 Rank Vulnerability Scanner Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 8,100+ Authentic Reviews
  • 244+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Vulnerability Scanner Software

G2 Grid® for Vulnerability Scanner Software plotting products by satisfaction and market presence

Highlighted products: Wiz, Aikido Security, CrowdStrike Falcon Cloud Security, Tenable Nessus, Tenable Vulnerability Management, Orca Security, Astra Pentest, and Intruder.

Underlying data: [Grid® JSON](https://www.g2.com/categories/vulnerability-scanner/grids.json?focus%5B%5D=wiz-wiz&focus%5B%5D=aikido-security&focus%5B%5D=crowdstrike-falcon-cloud-security&focus%5B%5D=tenable-nessus&focus%5B%5D=tenable-vulnerability-management&focus%5B%5D=orca-security&focus%5B%5D=astra-pentest&focus%5B%5D=intruder)

NetSPI

NetSPI PTaaS is a type of penetration testing as a service (PTaaS) solution designed to help organizations identify and remediate vulnerabilities within their systems, applications, and networks. This service utilizes a combination of skilled professionals, established processes, and advanced AI technology to provide contextualized security outcomes in real time, all accessible through a unified platform. By addressing the limitations of traditional penetration testing methods, NetSPI PTaaS offers a more efficient and comprehensive approach to security assessments. This service is targeted at businesses of all sizes, from startups to large enterprises, making it particularly beneficial for security teams looking to enhance their vulnerability management strategies. NetSPI PTaaS caters to a variety of use cases, including application security assessments, infrastructure testing, and evaluations of emerging technologies such as artificial intelligence. With over 50 different types of penetration tests available, including traditional point in time testing and our continuous offerings, organizations can customize their security evaluations to meet specific needs, ensuring thorough coverage across all potential attack surfaces. A key feature of NetSPI PTaaS is its commitment to delivering real-time findings through a single platform. This capability allows security teams to receive immediate insights into vulnerabilities, enabling them to act swiftly to mitigate risks based on role and priority, managing testing in just a few clicks. The platform's integration capabilities enhance its usability, allowing organizations to seamlessly incorporate findings into their existing security workflows. This streamlined approach not only saves time but also ensures that remediation efforts are based on high-fidelity, manually validated findings, thus improving overall security effectiveness. The expertise of NetSPI's team of over 350 in-house security professionals is another significant differentiator. Their extensive experience and knowledge in the field of cybersecurity ensure that the testing methodologies employed are rigorous and consistent, uncovering vulnerabilities, exposures, and misconfigurations that may be overlooked by other solutions. This white-glove approach to penetration testing emphasizes the importance of manual validation, providing organizations with reliable and actionable insights that can significantly enhance their security posture. NetSPI PTaaS stands out in the realm of penetration testing services by combining expert human analysis with advanced AI technology, delivering timely and accurate results. This empowers organizations to strengthen their defenses against evolving cyber threats, ensuring that they remain resilient in an increasingly complex security landscape.

Average Rating: 4.9/5.0

Total Reviews: 19

How Do G2 Users Rate NetSPI?

  • Has the product been a good partner in doing business?: 9.8/10 (Category avg: 9.2/10)

Who Is the Company Behind NetSPI?

  • Seller: NetSPI
  • Company Website:
  • Year Founded: 2001
  • HQ Location: Minneapolis, MN
  • Twitter: @NetSPI
    4,041 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    595 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 42% Medium, 37% Large

What Do G2 Reviewers Say About NetSPI?

AI-generated summary from verified user reviews

Pros
  • Users highlight the expertise of NetSPI's team, praising their exceptional leadership and effective project management throughout engagements.
  • Users commend the expertise and support of the NetSPI team, enhancing the overall engagement experience significantly.
  • Users value the effective communication of NetSPI, ensuring they're always updated and never left in the dark.
  • Users value the easy-to-use interface of NetSPI, enhancing communication and project management throughout their engagements.
  • Users praise the exceptional service quality of NetSPI, highlighting their effective communication and strong project management.
Cons
  • Users find the difficult navigation of NetSPI's interface hinders their ability to efficiently use the platform.
  • Users express concerns about false positives in the vulnerability report, making it unclear which devices are affected.
  • Users find that the vulnerability report lacks clarity regarding which devices are affected, causing confusion.
  • Users express concern about the lack of detail in vulnerability reports, making it unclear which devices are impacted.
  • Users experience lack of information regarding specific device impacts in vulnerability reports, leading to confusion and uncertainty.

What Are Recent G2 Reviews of NetSPI?

SentinelOne Singularity Identity Posture Management

Singularity Ranger AD is an identity configuration assessment solution that identifies misconfigurations, vulnerabilities, and real-time indicators of attack targeting Active Directory (AD) and Azure AD. By delivering prescriptive, actionable insight into exposures in your identity attack surface, Ranger AD helps you reduce the risk of compromise and brings your assets in line with security best practices.

Average Rating: 4.3/5.0

Total Reviews: 3

How Do G2 Users Rate SentinelOne Singularity Identity Posture Management?

  • Has the product been a good partner in doing business?: 9.2/10 (Category avg: 9.2/10)
  • Detection Rate: 10.0/10 (Category avg: 9.0/10)
  • Automated Scans: 8.3/10 (Category avg: 9.1/10)
  • Configuration Monitoring: 9.2/10 (Category avg: 8.5/10)

Who Is the Company Behind SentinelOne Singularity Identity Posture Management?

  • Seller: SentinelOne
  • Year Founded: 2013
  • HQ Location: Mountain View, CA
  • Twitter: @SentinelOne
    57,863 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    3,529 employees on LinkedIn®
  • Ownership: NASDAQ: S

Who Uses This Product?

  • Company Size: 67% Small, 33% Medium

What Are Recent G2 Reviews of SentinelOne Singularity Identity Posture Management?

Siemba

Siemba is an AI-driven Continuous Threat Exposure Management (CTEM) platform that helps enterprises, government agencies, and growing organizations discover, prioritize, and fix critical vulnerabilities across their entire attack surface. Security teams use Siemba to build and mature CTEM programs without requiring deep hacking expertise or constant human intervention. The platform brings together four integrated capabilities on a single unified interface: Penetration Testing as a Service (PTaaS) for expert-led manual pen testing on demand; GenPT for AI-native Dynamic Application Security Testing (DAST) that simulates real-world attack techniques against web applications and APIs; GenVA for AI-driven vulnerability assessment that continuously scans and scores risks across your environment; and EASM for External Attack Surface Management that maps and monitors all external-facing assets, including shadow IT and exposed infrastructure. Together these capabilities deliver actionable intelligence across the full CTEM lifecycle, from asset discovery and attack surface mapping through to risk prioritization, validation, and remediation guidance. Security leaders gain the visibility, speed, and scalability needed to run continuous offensive security programs and generate strategic insights that maximize Return on Mitigation. Siemba is trusted by enterprises, global systems integrators, and government agencies looking to consolidate their offensive security tooling, reduce exposure windows, and demonstrate measurable security improvement over time.

Average Rating: 4.7/5.0

Total Reviews: 5

How Do G2 Users Rate Siemba?

  • Automated Scans: 10.0/10 (Category avg: 9.1/10)

Who Is the Company Behind Siemba?

  • Seller: Siemba
  • Year Founded: 2018
  • HQ Location: Alpharetta, US
  • LinkedIn® Page: www.linkedin.com
    38 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 60% Small, 40% Medium

What Are Recent G2 Reviews of Siemba?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works

Xygeni

Xygeni: AI-Native ASPM for the Software Supply Chain Xygeni is an AI-native ASPM (Application Security Posture Management) platform that unifies native and third-party security findings into one prioritized view. Its own detection engines cover SAST, SCA, DAST, Secrets, IaC, Container, CI/CD, and Build Security, and it also ingests results from tools like Snyk, Veracode, and Checkmarx so teams don't have to abandon what they've already invested in. Every finding, regardless of source, gets scored by exploitability, reachability, and business impact through Xygeni's Dynamic Funnels, which is what drives its reported 90% cut in alert noise. Two AI systems sit underneath the platform. CoreAI acts as a correlation and reporting layer for security leaders, turning scattered findings into a single risk narrative. DevAI works earlier, inside the developer's IDE and AI coding assistants, catching problems in both human-written and AI-generated code and proposing fixes before a pull request is even opened. On the supply chain side, Xygeni's MEW engine (Malware Early Warning) is built to catch malicious open-source packages the moment they hit a public registry, ahead of when a formal malware signature would normally exist. Shield takes that enforcement to the developer's own machine, blocking unauthorized package downloads at the OS level before they reach disk. Xygeni also runs a dedicated Code Quality engine across ten languages, ranking maintainability and complexity issues alongside security findings in the same console, so a team can see when the messiest file is also the riskiest one. The platform connects to GitHub, GitLab, Bitbucket, Jenkins, and Azure DevOps, and deploys as SaaS, on-premises, or fully air-gapped. Xygeni was named Hot Company in ASPM and in GenAI Application Security at the 2026 Global InfoSec Awards.

Average Rating: 4.6/5.0

Total Reviews: 4

How Do G2 Users Rate Xygeni?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Detection Rate: 9.2/10 (Category avg: 9.0/10)
  • Automated Scans: 6.7/10 (Category avg: 9.1/10)
  • Configuration Monitoring: 9.2/10 (Category avg: 8.5/10)

Who Is the Company Behind Xygeni?

  • Seller: Xygeni Security
  • Year Founded: 2021
  • HQ Location: Madrid, ES
  • Twitter: @xygeni
    178 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    31 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 60% Small, 40% Medium

What Do G2 Reviewers Say About Xygeni?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the comprehensive security features of Xygeni, fostering a secure development environment without hindering productivity.
  • Users value the effective prioritization of security issues in Xygeni, allowing teams to focus on critical threats quickly.
  • Users value the effective risk management of Xygeni, enhancing security without hindering software development processes.
  • Users appreciate the robust security features of Xygeni, enhancing their development process while ensuring compliance and risk management.
  • Users value the seamless CI/CD integration of Xygeni, enabling early vulnerability detection without impacting release schedules.
Cons
  • Users face difficult setup issues with Xygeni, especially when dealing with certain edge cases requiring manual adjustments.
  • Users find the learning curve challenging for newcomers despite a generally intuitive platform, requiring familiarity with AppSec practices.

What Are Recent G2 Reviews of Xygeni?

ConnectSecure Vulnerability and Compliance Manager

ConnectSecure is a comprehensive SaaS cybersecurity solution designed to address vulnerabilities and secure assets for clients. It stands out for its strong emphasis on reporting customization, external and domain-level scanning, compliance management, and risk assessments. The platform offers a versatile and user-friendly experience, making it an attractive option for organizations seeking a robust and non-disruptive cybersecurity solution.

Average Rating: 4.0/5.0

Total Reviews: 2

How Do G2 Users Rate ConnectSecure Vulnerability and Compliance Manager?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 9.2/10)
  • Detection Rate: 10.0/10 (Category avg: 9.0/10)

Who Is the Company Behind ConnectSecure Vulnerability and Compliance Manager?

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of ConnectSecure Vulnerability and Compliance Manager?

Crashtest Security

Crashtest Security is a SaaS-based security vulnerability scanner allowing agile development teams to ensure continuous security before every release. Our state-of-the-art dynamic application security testing (DAST) solution integrates seamlessly with your dev environment and protects multi-page and JavaScript apps, as well as microservices and APIs. Set up Crashtest Security Suite in minutes, get advanced crawling options, and automate your security. Whether you want to see vulnerabilities within the OWASP Top 10 or you want to go for deep scans, Crashtest Security is here to help you stay on top of your security and protect your code and customers.

Average Rating: 5.0/5.0

Total Reviews: 2

How Do G2 Users Rate Crashtest Security?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Automated Scans: 10.0/10 (Category avg: 9.1/10)

Who Is the Company Behind Crashtest Security?

Who Uses This Product?

  • Company Size: 50% Medium, 50% Small

What Are Recent G2 Reviews of Crashtest Security?

Lynis Enterprise

Lynis Enterprise is a security solution for systems that run a Unix like Linux and macOS. It helps companies to perform daily security health scans. It can discover configuration issues, including vulnerable packages, missing best practices, and weak defaults.

Average Rating: 4.3/5.0

Total Reviews: 2

How Do G2 Users Rate Lynis Enterprise?

  • Detection Rate: 8.3/10 (Category avg: 9.0/10)
  • Automated Scans: 8.3/10 (Category avg: 9.1/10)
  • Configuration Monitoring: 8.3/10 (Category avg: 8.5/10)

Who Is the Company Behind Lynis Enterprise?

  • Seller: CISOFY
  • Year Founded: 2013
  • HQ Location: Vlijmen, NL
  • LinkedIn® Page: www.linkedin.com
    2 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of Lynis Enterprise?

What Are G2 Users Discussing About Lynis Enterprise?

PatrOwl

Patrowl offers a continuous and comprehensive risk coverage tool, safeguarding against accidental, opportunistic, and targeted attacks. Protecting your business from all external threat scenarios. Patrowl is structured around four fundamental actions: 1. Mapping: Ensure continuous discovery of all your internet exposed assets. 2. Identification: Detect weaknesses and vulnerabilities in real-time. 3. Remediation: Effortlessly generate remediation plans and automated 1-click reports. 4. Control: Supervise remediation or correction with 1-click retest.

Average Rating: 5.0/5.0

Total Reviews: 2

How Do G2 Users Rate PatrOwl?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Detection Rate: 8.3/10 (Category avg: 9.0/10)
  • Automated Scans: 8.3/10 (Category avg: 9.1/10)
  • Configuration Monitoring: 5.0/10 (Category avg: 8.5/10)

Who Is the Company Behind PatrOwl?

  • Seller: PatrOwl
  • Year Founded: 2020
  • HQ Location: Paris, FR
  • LinkedIn® Page: www.linkedin.com
    48 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Large

What Are Recent G2 Reviews of PatrOwl?

What Are G2 Users Discussing About PatrOwl?

Peach Fuzzer

Peach Fuzzer is an automated security testing platform that prevents zero-day attacks by findng vulnerabilities in hardware and software systems.

Average Rating: 3.0/5.0

Total Reviews: 2

Who Is the Company Behind Peach Fuzzer?

  • Seller: Peach Fuzzer
  • Year Founded: 2014
  • HQ Location: San Francisco, California, United States
  • LinkedIn® Page: www.linkedin.com
    3,120 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Medium, 50% Small

What Are G2 Users Discussing About Peach Fuzzer?

Vicarius

Vicarius offers vRx, an AI-driven vulnerability remediation platform designed to help organizations proactively protect their digital assets from software exploitation. By consolidating vulnerability assessment, prioritization, and remediation into a single solution, vRx enables security teams to efficiently manage and mitigate risks across various environments, including Windows, macOS, and Linux systems.

Average Rating: 4.0/5.0

Total Reviews: 2

How Do G2 Users Rate Vicarius?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 9.2/10)
  • Detection Rate: 10.0/10 (Category avg: 9.0/10)
  • Automated Scans: 9.2/10 (Category avg: 9.1/10)
  • Configuration Monitoring: 5.0/10 (Category avg: 8.5/10)

Who Is the Company Behind Vicarius?

  • Seller: Vicarius
  • Year Founded: 2016
  • HQ Location: New York, New York
  • Twitter: @vicariusltd
    2,018 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    100 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Large, 50% Medium

What Do G2 Reviewers Say About Vicarius?

AI-generated summary from verified user reviews

Pros
  • Users find it practical and simple to remedy detected vulnerabilities, though acknowledge some potential for improvement.
Cons
  • Users report occasional compatibility issues when loading scripts, though these are generally minimal and manageable.

What Are Recent G2 Reviews of Vicarius?

Vulners Scanner

Vulners is curating the largest correlated database of vulnerabilities and exploits and offers the tool for a customised vulnerability management solution, through API, Python SD, plugins and ready to use Linux Scanner.

Average Rating: 4.8/5.0

Total Reviews: 2

How Do G2 Users Rate Vulners Scanner?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Detection Rate: 10.0/10 (Category avg: 9.0/10)
  • Automated Scans: 10.0/10 (Category avg: 9.1/10)
  • Configuration Monitoring: 10.0/10 (Category avg: 8.5/10)

Who Is the Company Behind Vulners Scanner?

  • Seller: Vulners
  • Year Founded: 2015
  • HQ Location: Wilmington, US
  • LinkedIn® Page: www.linkedin.com
    7 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of Vulners Scanner?

What Are G2 Users Discussing About Vulners Scanner?

BinaryEdge

BinaryEdge combines Machine Learning and Cybersecurity techniques in a custom built platform to scan, acquire and classify public Internet data.

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate BinaryEdge?

  • Detection Rate: 10.0/10 (Category avg: 9.0/10)

Who Is the Company Behind BinaryEdge?

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of BinaryEdge?

Brakeman

Brakeman is a free vulnerability scanner specifically designed for Ruby on Rails applications. It statically analyzes Rails application code to find security issues at any stage of development.

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate Brakeman?

  • Detection Rate: 6.7/10 (Category avg: 9.0/10)
  • Automated Scans: 10.0/10 (Category avg: 9.1/10)

Who Is the Company Behind Brakeman?

  • Seller: Brakeman
  • HQ Location: N/A
  • Twitter: @brakeman
    1,404 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of Brakeman?

What Are G2 Users Discussing About Brakeman?

Clone Systems PCI ASV Scanning

Still need your quarterly PCI scan? Clone Systems has been a PCI SSC Approved Scanning Vendor (ASV) since 2007 and has delivered managed security since 1998. Buy online, add your IPs, run the scan and download your Attestation of Compliance the same day. What is included: - Quarterly external ASV scans that meet PCI DSS 4.0.1 Requirement 11.3.2. - Free rescans until you pass, so you only pay once per quarter. - A downloadable Attestation of Compliance and full scan report for your acquirer or QSA. - Clear remediation steps for every finding, plus the CloneGuard AI Assistant for guided fixes. - A guided annual SAQ workflow and a PCI checklist that tracks quarterly coverage in one dashboard. Plans start at $185 per year. Need more than PCI? Add external, internal, agent-based or authenticated web app vulnerability scanning, or an automated penetration test, from the same CloneGuard portal. Resell it under your brand: MSPs, payment providers, hosting providers and QSAs can offer white-label PCI ASV scanning to their customers, with optional add-on modules.

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate Clone Systems PCI ASV Scanning?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Detection Rate: 10.0/10 (Category avg: 9.0/10)
  • Automated Scans: 10.0/10 (Category avg: 9.1/10)

Who Is the Company Behind Clone Systems PCI ASV Scanning?

  • Seller: Clone Systems
  • Year Founded: 1998
  • HQ Location: Philadelphia, US
  • Twitter: @CloneSystemsInc
  • LinkedIn® Page: www.linkedin.com
    20 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of Clone Systems PCI ASV Scanning?

CloudSploit

CloudSploit provide a software for security and configuration scanner that can detect threats in AWS account.

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate CloudSploit?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Detection Rate: 10.0/10 (Category avg: 9.0/10)
  • Automated Scans: 10.0/10 (Category avg: 9.1/10)
  • Configuration Monitoring: 10.0/10 (Category avg: 8.5/10)

Who Is the Company Behind CloudSploit?

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of CloudSploit?

What Are G2 Users Discussing About CloudSploit?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated April 10, 2026