Home / Threat Defense / Vulnerability Management

Vulnerability Management

Proactively identify and fix security weaknesses to prevent cyber threats and protect your assets.

Try these 172 AI Vulnerability Management Tools

DShield
Free

DShield View DShield

Automate version scraping and vulnerability scanning for Ruby on Rails stacks.

DVHMA Damn Vulnerable Hybrid Mobile App
Free

DVHMA Damn Vulnerable Hybrid Mobile App View DVHMA Damn Vulnerable Hybrid Mobile App

A collection of resources for securing AWS environments using the CIS Amazon Web Services Foundations Benchmark 1.1

DVWA - Brute Force (High Level) - Anti-CSRF Tokens
Free

DVWA - Brute Force (High Level) - Anti-CSRF Tokens View DVWA - Brute Force (High Level) - Anti-CSRF Tokens

A VMware image for penetration testing purposes

Eagle
Free

Eagle View Eagle

The Node.js Bug Bounty Program is a program aimed at identifying and fixing security vulnerabilities in the Node.js ecosystem.

Faraday
Free

Faraday View Faraday

All-in-one vulnerability intelligence platform for prioritizing remediation efforts and driving security strategies.

findmytakeover
Free

findmytakeover View findmytakeover

A vulnerable Android application demonstrating various security issues and vulnerabilities

Flan
Free

Flan View Flan

TANNER is a remote data analysis and classification service for evaluating HTTP requests and composing responses for SNARE.

FullHunt
Free

FullHunt View FullHunt

OpenVAS is an open-source vulnerability scanner that provides extensive testing capabilities for identifying security weaknesses in networks and systems.

Fuzzapi
Free

Fuzzapi View Fuzzapi

A vulnerable Android application demonstrating various security issues and vulnerabilities

FuzzDB
Free

FuzzDB View FuzzDB

A vulnerability management tool for macOS that monitors and detects vulnerabilities in over 100 apps.

Gamma Ray
Free

Gamma Ray View Gamma Ray

Linux privilege escalation auditing tool for detecting security deficiencies in Linux kernels.

git-all-secrets
Free

git-all-secrets View git-all-secrets

A non-profit organization focused on improving the security of software through resources and training.

Git Scanner Framework
Free

Git Scanner Framework View Git Scanner Framework

Automate Google Hacking Database scraping and searching with Pagodo, a tool for finding vulnerabilities and sensitive information.

Git-Vuln-Finder
Free

Git-Vuln-Finder View Git-Vuln-Finder

A demonstration site for the Acunetix Web Vulnerability Scanner, intentionally vulnerable to various web-based attacks.

GoatseLinux: It's Wide Open [tm] GSL
Free

GoatseLinux: It's Wide Open [tm] GSL View GoatseLinux: It's Wide Open [tm] GSL

A tool that assesses AWS accounts for subdomain hijacking vulnerabilities in Route53 and CloudFront configurations.

Google CTF
Free

Google CTF View Google CTF

A vulnerability remediation platform that consolidates security findings, prioritizes risks using AI, and automates remediation workflows across cloud and application environments.

OpenVAS
Free

OpenVAS View OpenVAS

SSLyze is a fast and powerful SSL/TLS scanning tool and Python library with a focus on speed, reliability, and ease of integration.

Hack Yourself First
Free

Hack Yourself First View Hack Yourself First

A vulnerability assessment and management tool that uses patented technology to accurately identify vulnerabilities and prioritize them by risk.

Hijagger
Free

Hijagger View Hijagger

A utility for testing AWS Lambda functions for SQL Injection vulnerabilities using SQLMap attacks.

InsecureBankv2
Free

InsecureBankv2 View InsecureBankv2

The CVE Program catalogs publicly disclosed cybersecurity vulnerabilities.

InsightConnect Plugins
Free

InsightConnect Plugins View InsightConnect Plugins

A curated list of known malicious NPM packages

is-website-vulnerable
Free

is-website-vulnerable View is-website-vulnerable

A GitHub App that monitors GitHub organizations or repositories for adherence to security best practices and detects policy violations.

is-my-node-vulnerable
Free

is-my-node-vulnerable View is-my-node-vulnerable

Automate version scraping and vulnerability scanning for Ruby on Rails stacks.