Lonkero
Lonkero is a high-performance web vulnerability scanner built in Rust for penetration testers and bug bounty hunters who are tired of slow, bloated tools that generate hundreds of false positives.
Cost / License
- Freemium (Subscription)
- Open Source
Application type
EUPlatforms
- Self-Hosted
- Rust
- Mac
- Windows
- Linux
Features
- Command line interface
- Vulnerability Assessment
- Rust
Tags
- Web Application Security
- offensive-security
- xss
- webscanner
- Security
- hackers
- web-security
- cve-scanning
- websecurity
- web-pentest
- appsec
- security-automation
Lonkero News & Activities
Recent activities
- bountyyfi updated Lonkero
bountyyfi added Lonkero as alternative to Golem Security Scanner, Zed Attack Proxy (ZAP), nuclei and Burp Suite- bountyyfi liked Lonkero
- bountyyfi added Lonkero
- POX updated Lonkero
Lonkero information
Developed by
bountyyfi Licensing
Open Source and Freemium product.Pricing
Subscription ranging between $16 and $330 per month + free version with limited functionality.Written in
Alternatives
5 alternatives listedSupported Languages
- English
AlternativeTo Categories
Security & Privacy, OS & UtilitiesGitHub repository
- 884 Stars
- 41 Forks
- 0 Open Issues
- Updated
What is Lonkero?
Lonkero is a high-performance web vulnerability scanner built in Rust for penetration testers and bug bounty hunters who are tired of slow, bloated tools that generate hundreds of false positives.
WHY LONKERO?
Speed matters. Lonkero is written in Rust – no garbage collector pauses, minimal memory footprint, handles thousands of concurrent requests without breaking a sweat. Scan faster, find more, move on to the next target.
FEATURES
• 60+ attack modules covering XSS, SQLi, SSRF, IDOR, CORS misconfigurations, open redirects, and more • Automatic crawling and intelligent fuzzing • Low false positive rate – focuses on exploitable, real-world vulnerabilities • Single binary, zero dependencies – just download and run • Configurable scan profiles for different engagement types • Clean, actionable output – no 500-page reports full of informational noise
WHO IS IT FOR?
• Penetration testers who need fast, reliable reconnaissance • Bug bounty hunters grinding multiple targets • Security teams integrating automated scanning into CI/CD • Developers who want to catch vulnerabilities before shipping
TRACK RECORD
Built by a security researcher with 130+ validated bug bounty findings and multiple published CVEs. Lonkero is the tool I wanted but couldn't find – so I built it.
PRICING
Freemium model with open source core. Premium tiers available for advanced modules and commercial use.