Burp Suite is described as 'Integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting' and is a vulnerability scanner in the security & privacy category. There are more than 25 alternatives to Burp Suite for a variety of platforms, including Windows, Linux, Web-based, Mac and SaaS apps. The best Burp Suite alternative is mitmproxy, which is both free and Open Source. Other great apps like Burp Suite are Zed Attack Proxy (ZAP), Fiddler, HTTP Toolkit and SiteOne Crawler.
PolarProxy is a transparent SSL/TLS proxy. PolarProxy decrypts and re-encrypts TLS traffic, while also saving the decrypted traffic in a PCAP file that can be loaded into Wireshark or an intrusion detection system (IDS).
Check realtime and continuously for outdated web software on your server. Delivered by mail and an easy to use dashboard and get notified if PHP, Apache, cPanel, Wordpress, Drupal and many more become outdated.
Test your website like a real attacker would. Nautillo Pro finds account takeover risks, API exposure, broken access control, and AI security flaws before users and hackers do.
Open-source native macOS HTTP debugging proxy — intercept HTTPS, inspect APIs, mock responses, debug WebSocket & GraphQL. Community-driven. For developers, by developers.
Unified application security platform — 12 scanners including SAST, DAST, SCA, and pen-testing in one on-premise deployment. Replaces your entire AppSec stack.
ShipSafe is a free online website safety checker that helps users quickly analyze whether a website is safe or potentially risky. By entering a domain or URL, ShipSafe provides a trust score, security insights, and reputation indicators that help users avoid scams, phishing...
Defense, driven by a fleet of AI agents. Axeploit can automatically create multiple accounts. It operates & attacks with real contact details, just like a hacker.
Human-in-the-loop penetration testing enhanced with AI. Identify vulnerabilities faster, reduce risk, and stay audit-ready with actionable reports and real-time visibility.
Firefox add-on that lets you change headers and request parameters before they're sent to the server. Unlike proxy request modifiers, it's integrated into the browser, so it has no problem with HTTPS connections, client authentication certificates, or other features that...
Most developers don't find their vulnerabilities. Attackers do. VigilFlux automates the security review so you can keep building without flying blind.
Interceptor is a local-first desktop HTTP/HTTPS proxy for authorized security testing, traffic capture, replay, diagnostics, and evidence-ready reporting.
Scan your APIs for prompt injection and 12 security checks in less than a minute, MCP, CLI and GH Action ready to CI/DI integration.
Sweden
EU
Belgium
Estonia
Bangladesh
United Kingdom
Canada
Mexico