Vulnerability Scanning tools.
Vulnerability mgmt
Tool to directly patch container images given the vulnerability scanning results
Vulnerability scanner
Real-time threat intelligence
Threat intel
Threat intelligence and detection
Threat intel
Vulnerability mgmt
Dev security
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
All 10 tools at a glance — average rating 0.0 across 0 verified reviews.
| Rank | Product | Rating | Reviews | Score | Pricing | From | |
|---|---|---|---|---|---|---|---|
| #1 | Rapid7 InsightVM | 0.0 ★ | 0 | 9 | subscription | — | View → |
| #2 | copa | 0.0 ★ | 0 | 9 | free | — | View → |
| #3 | Tenable Nessus | 0.0 ★ | 0 | 9 | subscription | — | View → |
| #4 | Recorded Future | 0.0 ★ | 0 | 9 | subscription | $19.00 | View → |
| #5 | Mandiant | 0.0 ★ | 0 | 9 | subscription | — | View → |
| #6 | Anomali | 0.0 ★ | 0 | 9 | subscription | $19.00 | View → |
| #7 | CrowdStrike Falcon X | 0.0 ★ | 0 | 9 | subscription | — | View → |
| #8 | Qualys | 0.0 ★ | 0 | 9 | subscription | — | View → |
| #9 | Snyk | 0.0 ★ | 0 | 9 | subscription | — | View → |
| #10 | promptfoo | 0.0 ★ | 0 | 9 | free | — | View → |
Recency-weighted average from purchase-verified reviewers.
Growth in review count over the last 90 days.
Live lowest verified merchant offer vs category median.
Feature coverage relative to category benchmarks.
Listings refresh daily from live merchant feeds. Sponsored placements are always labelled and never affect rank order. See our editorial policy.
Rapid7 InsightVM ranks #1 in our editorial review, based on verified user reviews, live merchant pricing, and product depth. See the full ranking above for #2–#10.
Our editorial score combines verified user reviews (40%), rating velocity over the last 90 days (30%), price competitiveness against live merchant offers (20%), and product depth against category benchmarks (10%). Sponsored placements are always labelled and never affect rank order.
Yes — several products in this list offer a free or freemium tier. Check each product page for current plan details.
Selecting the right vulnerability scanning platform is rarely about picking the market leader — it's about matching the tool to the shape of your team, workflow, and budget. Below we've broken down the questions we ask when evaluating 10 products in this category, so you can shortcut weeks of vendor demos and free-trial fatigue.
Write down the single outcome you need — faster onboarding, lower cost per seat, better integrations. A vulnerability scanning tool that wins on one dimension usually loses on another; pick your dimension first.
Small teams (1–10) reward simplicity and per-seat pricing. Mid-market teams (10–200) need SSO, granular roles, and audit logs. Enterprise buyers should shortlist only vendors with published SOC 2 reports.
The sticker price is the smallest number. Add implementation, migration, add-on modules, training, and the eventual switching cost. Multiply year-one pricing by three for a realistic 3-year TCO.
The tools you already run — CRM, billing, identity, data warehouse — dictate what will work. Any shortlist candidate that can't native-integrate with your top 3 systems is a soft no.
We scored every vulnerability scanning vendor on the shortlist against the same feature matrix. If a candidate misses more than two of these, we recommend moving on — the category has matured enough that all of these should be table stakes.
Enough for solo users and evaluators. Expect capped seats, no SSO, community support only. Great for validating that vulnerability scanning fits your workflow before spending.
The sweet spot for most 10–100 person teams. Full feature access, standard integrations, email support, and typically monthly billing with no commit.
Adds SSO, SCIM provisioning, advanced permissions, dedicated support, and legal review of DPAs. Annual contracts, often 20–40% higher than list.
Need a vulnerability scanning tool that scales from 3 to 30 seats without a re-platform. Favor freemium + self-serve.
Prioritise automation, integrations with the existing stack, and reporting dashboards leadership can read at a glance.
Focus on SSO, audit trails, data residency, and DPA / SOC 2 documentation before the contract is signed.
Start with our #1 pick, Rapid7 InsightVM, or browse the full ranking above. Every product page shows live merchant prices, verified reviews, and side-by-side comparison against category alternatives.
Browse all best-of lists