Web vulnerability scanners

Probe running web applications and APIs for vulnerabilities from the outside.

Im Vergleich

Web vulnerability scanners
Tool	Sterne	Lizenz	Bedingungen	Selbst hostbar	Sprache	Neuestes Release	Letzter Push
Nuclei	32k	MIT	Open Source	Nein	Go	v3.11.1	2026-10-06
ZAP	16k	Apache-2.0	Open Source	Nein	Java	v2.17.0	2026-10-06
Nikto	11k	Other	Open Core	Nein	Perl	2.6.1	2026-10-04
Wapiti	1.9k	GPL-2.0	Open Source	Nein	Python	3.3.2	2026-10-05

4 Tools

Nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Sprache: Go
Lizenz: MIT
Sterne: 32k
Neuestes Release: v3.11.1
Letzter Push: 2026-10-06

ZAP

The ZAP by Checkmarx Core project

Sprache: Java
Lizenz: Apache-2.0
Sterne: 16k
Neuestes Release: v2.17.0
Letzter Push: 2026-10-06

Nikto

Nikto web server scanner

Sprache: Perl
Lizenz: Other
Sterne: 11k
Neuestes Release: 2.6.1
Letzter Push: 2026-10-04

Wapiti

Web vulnerability scanner written in Python3

Sprache: Python
Lizenz: GPL-2.0
Sterne: 1.9k
Neuestes Release: 3.3.2
Letzter Push: 2026-10-05

Was diese Tools ersetzen

Burp SuiteWeb vulnerability scanners2 →