The Open Vulnerability Assessment System (OpenVAS) is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.



The best open source alternative to Intruder is OpenVAS. If that doesn't suit you, our users have ranked more than 50 alternatives to Intruder and ten of them is open source so hopefully you can find a suitable replacement. Other interesting open source alternatives to Intruder are Zed Attack Proxy (ZAP), Nikto, wapiti and w3af.
The Open Vulnerability Assessment System (OpenVAS) is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.



The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.




Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6400 potentially dangerous files/CGIs, checks for outdated versions of over 1000 servers, and version specific problems on over 270 servers.

Wapiti allows you to audit the security of your web applications. Wapiti is a command line tool.

SCAP is a line of standards managed by NIST. It was created to provide a standardized approach to maintaining the security of enterprise systems, such as automatically verifying the presence of patches, checking system security configuration settings, and examining systems for...


Nuclei is used to send requests across targets based on a template, leading to zero false positives and providing fast scanning on a large number of hosts. Nuclei offers scanning for a variety of protocols, including TCP, DNS, HTTP, SSL, File, Whois, Websocket, Headless etc.

A fully automated, active web application security reconnaissance tool. Key features: High speed: pure C code, highly optimized HTTP handling, minimal CPU footprint - easily achieving 2000 requests per second with responsive targets.


A general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

Improve your authentication security for your linux servers with mutual TLS (mTLS). WoTT automatically rotates private keys with our public key infrastructure (PKI) and lets you seamlessly and easily manage certificates at scale.


