Cost / License
- Free Personal
- Proprietary
Platforms
- Mac
- Windows
- Linux


Zed Attack Proxy (ZAP) is described as 'The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications' and is a penetration testing tool in the network & admin category. There are more than 25 alternatives to Zed Attack Proxy (ZAP) for a variety of platforms, including Windows, Linux, Mac, Web-based and SaaS apps. The best Zed Attack Proxy (ZAP) alternative is Fiddler, which is free. Other great apps like Zed Attack Proxy (ZAP) are mitmproxy, HTTP Toolkit, Charles and Burp Suite.


Vulners is a high-quality correlated database of software vulnerabilities. Users can create a custom VM solution using our consolidated database through API, multiple vulnerability scanners, plugins, and many other security tools and integrations.



IEWatch is a plug-in for Microsoft Internet Explorer that helps you achieve your web development and web analysis tasks more efficiently.



Stop breaches before they happen. RogueSight protects your Web Applications and APIs with continuous scanning, actionable insights and clear remediation guidance.

Modern HTTP debugging tool, Debug, mock, and rewrite HTTP/HTTPS traffic with composable rules.




At Nikto Online Scanner, we are dedicated to providing a comprehensive solution for assessing the security of web servers. Our platform offers a powerful tool that conducts extensive tests to identify potential vulnerabilities, misconfigurations, and security risks associated...

Scan your APIs for prompt injection and 12 security checks in less than a minute, MCP, CLI and GH Action ready to CI/DI integration.


Xalgorix is an Apache-2.0 open-source autonomous AI pentester for web applications and source repositories. It runs a structured 22-phase methodology, orchestrates security tools and browser-assisted testing, then sends candidate findings to an independent verifier that attempts...




Interceptor is a local-first desktop HTTP/HTTPS proxy for authorized security testing, traffic capture, replay, diagnostics, and evidence-ready reporting.



