Home / Threat Defense / Vulnerability Management

Vulnerability Management

Proactively identify and fix security weaknesses to prevent cyber threats and protect your assets.

Try these 172 AI Vulnerability Management Tools

DVHMA Damn Vulnerable Hybrid Mobile App
Free

DVHMA Damn Vulnerable Hybrid Mobile App

A collection of resources for securing AWS environments using the CIS Amazon Web Services Foundations Benchmark 1.1

DVWA - Brute Force (High Level) - Anti-CSRF Tokens
Free

DVWA - Brute Force (High Level) - Anti-CSRF Tokens

A VMware image for penetration testing purposes

Eagle
Free

Eagle

The Node.js Bug Bounty Program is a program aimed at identifying and fixing security vulnerabilities in the Node.js ecosystem.

Faraday
Free

Faraday

All-in-one vulnerability intelligence platform for prioritizing remediation efforts and driving security strategies.

findmytakeover
Free

findmytakeover

A vulnerable Android application demonstrating various security issues and vulnerabilities

Flan
Free

Flan

TANNER is a remote data analysis and classification service for evaluating HTTP requests and composing responses for SNARE.

FullHunt
Free

FullHunt

OpenVAS is an open-source vulnerability scanner that provides extensive testing capabilities for identifying security weaknesses in networks and systems.

Fuzzapi
Free

Fuzzapi

A vulnerable Android application demonstrating various security issues and vulnerabilities

FuzzDB
Free

FuzzDB

A vulnerability management tool for macOS that monitors and detects vulnerabilities in over 100 apps.

Gamma Ray
Free

Gamma Ray

Linux privilege escalation auditing tool for detecting security deficiencies in Linux kernels.

git-all-secrets
Free

git-all-secrets

A non-profit organization focused on improving the security of software through resources and training.

Git Scanner Framework
Free

Git Scanner Framework

Automate Google Hacking Database scraping and searching with Pagodo, a tool for finding vulnerabilities and sensitive information.

Git-Vuln-Finder
Free

Git-Vuln-Finder

A demonstration site for the Acunetix Web Vulnerability Scanner, intentionally vulnerable to various web-based attacks.

GoatseLinux: It's Wide Open [tm] GSL
Free

GoatseLinux: It's Wide Open [tm] GSL

A tool that assesses AWS accounts for subdomain hijacking vulnerabilities in Route53 and CloudFront configurations.

Google CTF
Free

Google CTF

A vulnerability remediation platform that consolidates security findings, prioritizes risks using AI, and automates remediation workflows across cloud and application environments.

OpenVAS
Free

OpenVAS

SSLyze is a fast and powerful SSL/TLS scanning tool and Python library with a focus on speed, reliability, and ease of integration.

Hack Yourself First
Free

Hack Yourself First

A vulnerability assessment and management tool that uses patented technology to accurately identify vulnerabilities and prioritize them by risk.

Hijagger
Free

Hijagger

A utility for testing AWS Lambda functions for SQL Injection vulnerabilities using SQLMap attacks.

is-website-vulnerable
Free

is-website-vulnerable

A GitHub App that monitors GitHub organizations or repositories for adherence to security best practices and detects policy violations.

is-my-node-vulnerable
Free

is-my-node-vulnerable

Automate version scraping and vulnerability scanning for Ruby on Rails stacks.