Sites and apps similar to FOFA include Shodan, which has a free version. Other options are Censys, Criminal IP, ZoomEye and IVRE. Vulnerability Scanners like FOFA are a crowded field, with more than 25 alternatives for Linux, Windows, Mac, self-hosting and Android.
Shodan is a search engine that lets you find specific computers (routers, servers, etc.) using a variety of filters. Some have also described it as a public port scan directory or a search engine of banners.
United States
Censys is a search engine that allows computer scientists to ask questions about the devices and networks that compose the internet.
United States
Criminal IP protects IT assets and businesses by analyzing all years of cyber threats and prediciting exploits. Criminal IP provides real-time intelligence to enhance cybersecurity competencies in all aspects.
South Korea
China
France
EU
Whatoblock is a real-time cybersecurity threat intelligence platform with global botnet tracking, scanner detection, interactive threat search, and a live threat map.
United Kingdom
Wapiti allows you to audit the security of your web applications. Wapiti is a command line tool.
Test your website like a real attacker would. Nautillo Pro finds account takeover risks, API exposure, broken access control, and AI security flaws before users and hackers do.
EstoniaEU
ShipSafe is a free online website safety checker that helps users quickly analyze whether a website is safe or potentially risky. By entering a domain or URL, ShipSafe provides a trust score, security insights, and reputation indicators that help users avoid scams, phishing...
Bangladesh
A fully automated, active web application security reconnaissance tool. Key features: High speed: pure C code, highly optimized HTTP handling, minimal CPU footprint - easily achieving 2000 requests per second with responsive targets.
United States
Websecurify is a powerful web application security testing environment designed from the ground up to provide the best combination of automatic and manual vulnerability testing technologies.
Put yourself in the shoes of a hacker! Without technical expertise, launch an audit to detect security flaws on your website or web application. Online website vulnerability scanner. No installation required. ISO & RGPD compliant. How to avoid hackers?
