Zed Attack Proxy (ZAP) is described as 'The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications' and is a penetration testing tool in the network & admin category. There are more than 25 alternatives to Zed Attack Proxy (ZAP) for a variety of platforms, including Windows, Linux, Mac, Web-based and SaaS apps. The best Zed Attack Proxy (ZAP) alternative is Fiddler, which is free. Other great apps like Zed Attack Proxy (ZAP) are mitmproxy, HTTP Toolkit, Charles and Burp Suite.
Nuclei is used to send requests across targets based on a template, leading to zero false positives and providing fast scanning on a large number of hosts. Nuclei offers scanning for a variety of protocols, including TCP, DNS, HTTP, SSL, File, Whois, Websocket, Headless etc.
Test your website like a real attacker would. Nautillo Pro finds account takeover risks, API exposure, broken access control, and AI security flaws before users and hackers do.
Unified application security platform — 12 scanners including SAST, DAST, SCA, and pen-testing in one on-premise deployment. Replaces your entire AppSec stack.
ShipSafe is a free online website safety checker that helps users quickly analyze whether a website is safe or potentially risky. By entering a domain or URL, ShipSafe provides a trust score, security insights, and reputation indicators that help users avoid scams, phishing...
A fully automated, active web application security reconnaissance tool. Key features: High speed: pure C code, highly optimized HTTP handling, minimal CPU footprint - easily achieving 2000 requests per second with responsive targets.
Pabit is a modern project management and task tracking tool designed to help teams organize work without unnecessary complexity. It provides tasks, sprints, project modules, and real-time analytics in a clean and intuitive interface.
Defense, driven by a fleet of AI agents. Axeploit can automatically create multiple accounts. It operates & attacks with real contact details, just like a hacker.
HTTP Debugger captures and decrypts HTTP/HTTPS from any Windows app without proxy setup — HTTP/2, WebSocket, SSE, gRPC and localhost included. Edit and replay requests, modify traffic on the fly, and let an AI assistant read the session over the built-in MCP server.
Audit your website security and web applications for SQL injection, Cross site scripting and other web vulnerabilities with Acunetix Web Security Scanner. Download Free Edition!
James is a HTTP Proxy and Monitor that enables developers to view and intercept requests made from the browser. It is an open-source alternative to the popular developer tool Charles.
HunterX is an open-source, AI-assisted vulnerability scanner and red team framework designed to automate and orchestrate modern security testing workflows.
United States
Estonia
EU
Bangladesh
Russia
Egypt
