vulnerability-scanners - List of both free and paid vulnerability scanners

项目说明

> A curated list of scanners — both free and commercial — organized by type.
>
> 
> ![Last Updated]()
>
> ---
>
> ## Table of Contents
>
> - Network Scanners
> - - Web Application Scanners
> - - Container and Cloud Scanners
> - - SAST / Code Scanners
> - - Infrastructure and Compliance
> - - Commercial / SaaS
>
> - ---
>
> ## Network Scanners
>
> | Name | License | Self-hosted | Links | Description |
> |------|---------|-------------|-------|-------------|
> | Nmap | Free / Open Source | yes | GitHub | De facto standard for network discovery and port scanning. NSE scripts add detection. |
> | Masscan | Free / Open Source | yes | GitHub | Internet-scale port scanner. Sends millions of packets per second — faster than Nmap for large ranges. |
> | OpenVAS / Greenbone | Free / Open Source | yes | GitHub | Full-featured network scanner. The open source core behind Greenbone Security Manager. |
> | Nessus Essentials | Free (limited, 16 IPs) | yes | — | Free of Nessus. Industry gold standard for scanning. |
> | Nexpose / InsightVM | Commercial | yes + SaaS | — | Rapid7 network and endpoint scanner with real-time risk scoring and remediation workflows. |
> | Zmap | Free / Open Source | yes | GitHub | Single-packet scanner designed for internet-wide surveys. Complements Nmap for large-scale research. |
>
> ---
>
> ## Web Application Scanners
>
> | Name | License | Self-hosted | Links | Description |
> |------|---------|-------------|-------|-------------|
> | OWASP ZAP | Free / Open Source | yes | GitHub | Most widely used open source web app scanner. Supports acti scanning and CI/CD integration. |
> | Burp Suite | Free (Community) + Commercial | yes | — | Industry-standard web security testing platform. Community is free; Pro adds automated scanning. |
> | Nikto | Free / Open Source | yes | GitHub | Web ser that checks for outdated software, misconfigurations and known . |
> | Wapiti | Free / Open Source | yes | GitHub | Black-box web scanner. Tests for SQLi, XSS, file inclusion, SSRF and more. |
> | SQLMap | Free / Open Source | yes | GitHub | Automated SQL injection detection and exploitation tool. Supports all major database backends. |
> | w3af | Free / Open Source | yes | GitHub | Web application attack and audit framework with over 200 plugins co OWASP Top 10. |
> | Nuclei | Free / Open Source | yes | GitHub | Fast template-based scanner with a massi library co CVEs and misconfigurations. |
> | Acunetix | Commercial | SaaS + On-prem | — | Commercial web app scanner with deep crawling, Ja rendering and IAST support. |
>
> ---
>
> ## Container and Cloud Scanners
>
> | Name | License | Self-hosted | Links | Description |
> |------|---------|-------------|-------|-------------|
> | Trivy | Free / Open Source | yes | GitHub | All-in-one scanner for container images, filesystems, Git repos and IaC. Excellent CI/CD integration. |
> | Grype | Free / Open Source | yes | GitHub | Container and filesystem scanner from Anchore. Pairs with Syft for SBOM generation. |
> | Clair | Free / Open Source | yes | GitHub | Static analysis of container images for known . Used by Quay.io and Harbor. |
> | Falco | Free / Open Source | yes | GitHub | Runtime security for containers and Kubernetes. Detects anomalous behavior syscall monitoring. |
> | Prowler | Free / Open Source | yes | GitHub | AWS, GCP and Azure security assessment. Checks against CIS benchmarks, GDPR, HIPAA and more. |
> | ScoutSuite | Free / Open Source | yes | GitHub | Multi-cloud security auditing by NCC Group. Supports AWS, Azure, GCP, Alibaba Cloud and more. |
> | Checkov | Free / Open Source | yes | GitHub | Static analysis for IaC (Terraform, CloudFormation, Kubernetes, Helm, ARM templates). |
> | Anchore Enterprise | Commercial | yes | — | Enterprise of Grype/Syft with policy engine, reporting and registry integration. |
>
> ---
>
> ## SAST / Code Scanners
>
> | Name | Language(s) | License | Links | Description |
> |------|------------|---------|-------|-------------|
> | Semgrep | 30+ languages | Free + Commercial | GitHub | Fast, lightweight static analysis engine. Community rules co Top 10 across 30+ languages. |
> | CodeQL | C, C#, Go, Java, JS, Python, Ruby, Swift | Free (open source) | GitHub | GitHub semantic code analysis engine. Powers automated security reviews in GitHub Ad Security. |
> | SonarQube | 20+ languages | Free (Community) + Commercial | GitHub | Continuous code quality and security analysis. Integrates into most CI pipelines. |
> | Bandit | Python | Free / Open Source | GitHub | Python-specific SAST tool that finds common security issues in Python code. |
> | Brakeman | Ruby on Rails | Free / Open Source | GitHub | Static analysis security scanner specifically for Ruby on Rails applications. |
> | Gosec | Go | Free / Open Source | GitHub | Golang security checker that inspects source code for security problems. |
> | ESLint Security | Ja / Node.js | Free / Open Source | GitHub | ESLint plugin that detects potential security in Node.js code. |
> | Checkmarx | Multi-language | Commercial | — | Enterprise SAST/DAST/SCA platform with deep dataflow analysis. |
>
> ---
>
> ## Infrastructure and Compliance
>
> | Name | License | Self-hosted | Links | Description |
> |------|---------|-------------|-------|-------------|
> | Lynis | Free / Open Source | yes | GitHub | Security auditing tool for Linux, macOS and Unix. Performs hardening checks and compliance assessments. |
> | OpenSCAP | Free / Open Source | yes | GitHub | NIST SCAP standard implementation for configuration compliance scanning. Used by many Linux . |
> | Vuls | Free / Open Source | yes | GitHub | Agentless Linux/FreeBSD scanner. Scans installed packages against NVD and ad. |
> | Chef InSpec | Free / Open Source | yes | GitHub | Compliance-as-code framework for testing infrastructure against security policies and regulations. |
>
> ---
>
> ## Commercial / SaaS
>
> | Name | Type | Description |
> |------|------|-------------|
> | Qualys VMDR | SaaS | Cloud-based management, detection and response. One of the largest KBs in the industry. |
> | Tenable.io | SaaS | Cloud of Nessus with asset discovery, risk-based prioritization and reporting. |
> | Tenable Nessus Pro | On-prem | Full commercial Nessus with unlimited IPs and ad scanning policies. |
> | Rapid7 InsightVM | SaaS + On-prem | Li and risk management with Metasploit integration. |
> | Holm Security | SaaS | Scandinavian management platform with asset discovery and threat intelligence. |
> | Snyk | SaaS + CLI | De security platform co open source, code, containers and IaC. |
> | | SaaS | Application security testing platform co SAST, DAST, SCA and penetration testing. |
>
> ---
>
> ## Contributing
>
> See CONTRIBUTING.md for guidelines on how to add a new scanner.
>
> A machine-readable of this list is a in scanners.json.

项目信息

开发语言：未知

Star 数：9

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕List of both free and paid vulnerability scanners展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。