Apps similar to Zed Attack Proxy (ZAP) include Fiddler, which has a free version. Other options are mitmproxy, HTTP Toolkit, Burp Suite and Charles. There's no shortage of Penetration Testing Tools like Zed Attack Proxy (ZAP), with more than 50 alternatives for Windows, Linux, Mac, the web and iPhone.
A single platform for AI pentesting, attack surface monitoring, cloud security and vulnerability management. Built for stretched security, IT and compliance teams.
Vulners is a high-quality correlated database of software vulnerabilities. Users can create a custom VM solution using our consolidated database through API, multiple vulnerability scanners, plugins, and many other security tools and integrations.
United States
IEWatch is a plug-in for Microsoft Internet Explorer that helps you achieve your web development and web analysis tasks more efficiently.
United States
Easy, intuitive yet powerful HTTP(S) debugging proxy for macOS, Windows and Linux — capture, inspect, mock, break and replay traffic.
Germany
EU
Stop breaches before they happen. RogueSight protects your Web Applications and APIs with continuous scanning, actionable insights and clear remediation guidance.
EstoniaEU
orb44 is an automated, AI-driven cybersecurity platform designed to protect your web perimeter and server infrastructure from modern threats. Built for web agencies, developers, and businesses, it provides continuous visibility and proactive defense without the complexity of...
United States
Modern HTTP debugging tool, Debug, mock, and rewrite HTTP/HTTPS traffic with composable rules.
United States
At Nikto Online Scanner, we are dedicated to providing a comprehensive solution for assessing the security of web servers. Our platform offers a powerful tool that conducts extensive tests to identify potential vulnerabilities, misconfigurations, and security risks associated...
Free native HTTPS debugging proxy for Mac (Linux beta) with a built-in API client and an MCP server for AI coding assistants.
India
Scan your APIs for prompt injection and 12 security checks in less than a minute, MCP, CLI and GH Action ready to CI/DI integration.
Mexico
Xalgorix is an Apache-2.0 open-source autonomous AI pentester for web applications and source repositories. It runs a structured 22-phase methodology, orchestrates security tools and browser-assisted testing, then sends candidate findings to an independent verifier that attempts...
India
Interceptor is a local-first desktop HTTP/HTTPS proxy for authorized security testing, traffic capture, replay, diagnostics, and evidence-ready reporting.
United Kingdom
