Cybersecurity Tools

Top Tier (Enterprise / Most Powerful)

• ⭐Burp Suite
• ⭐Nessus
• QualysGuard
• Rapid7 Nexpose
• Tenable.io
• Acunetix
• Netsparker
• Detectify
• Intruder
• Veracode
• Checkmarx
• HCL AppScan
• Fortify WebInspect

Strong Open Source / Widely Used

• ⭐Nmap
• ⭐Nuclei
• OpenVAS
• OWASP ZAP
• Nikto
• WPScan
• sqlmap
• W3af
• Arachni
• Wapiti
• Skipfish
• IronWASP
• Paros Proxy

Recon / Internet-wide Intelligence

• ⭐Shodan
• Censys
• BinaryEdge
• Findomain

DevSecOps / SAST / Dependency Scanning

• Snyk
• JFrog Xray
• Sonatype Nexus Lifecycle
• Dependency-Check
• GitLab Ultimate
• Kiuwan
• RIPS Technologies
• Code Dx

Web App / API Scanners

• Probely
• WhiteHat Sentinel
• AppCheck
• Immunio
• Astra Security Suite
• Websecurify
• Grendel-Scan

Exploitation / Offensive Tools

• ⭐Metasploit Pro
• BeEF
• SQLninja
• sqlsus
• JSQL Injection
• Havij
• DSSS

Proxy / Traffic / Fuzzing Tools

• Fiddler
• Apache JMeter
• Ratproxy
• Powerfuzzer

WAF / Protection Platforms

• Cloudflare WAF
• Imperva WAF
• F5 Advanced WAF
• StackPath WAF
• Reblaze
• Indusface
• AppTrana

Misc / Niche / Lower Impact

• Vega
• WebCruiser
• Sitadel
• CMSmap
• Plecost
• Retire.js
• Grabber
• XSSer
• Seccubus
• Patrowl
• VulnWhisperer
• Vulmap
• Reconmap
• ZeroNorth
• Wallarm
• Shadow Daemon
• SiteGuarding
• WebARX
• SecureLayer7
• HTTPCS Security
• Sqreen
• DeepScan
• Mobsfscan
• Tsunami Security Scanner
• GasMask
• Screaming Frog SEO Spider