Best dom-based-xss-finder Alternatives & Competitors in 2026

Cyclops

A browser with XSS detection capabilities

VulnSign Dynamic Application Security Testing

DAST tool for scanning web apps, microservices, and APIs for vulnerabilities

EnProbe Cybersecurity

Cloud-based vulnerability assessment tool for web application security

AppCheck SPA Scanner

DAST scanner for Single Page Applications using headless browser technology

Halo Security Application Scanning

DAST tool for detecting web app vulnerabilities like SQL injection and XSS

Intruder Web Application Scanning

DAST tool for scanning web apps and APIs for OWASP Top 10 vulnerabilities

SaltyCloud Dorkbot

Automated web vulnerability scanner for SQLi, XSS, and other web app flaws

Acunetix Web Application & API Security

DAST scanner for web apps & APIs with automated vuln detection & remediation

BruteXSS

A tool to find XSS vulnerabilities in web applications

w3af

w3af is an open source web application security scanner that identifies over 200 types of vulnerabilities including XSS, SQL injection, and OS commanding in web applications.

Paros

A Java based HTTP/HTTPS proxy for assessing web application vulnerability with various useful features.

Wapiti

Web-application vulnerability scanner with extensive coverage of security testing modules.

N-Stalker

A web security tool that scans for vulnerabilities and known attacks.

ParamPamPam

ParamPamPam is an open-source tool that detects and exploits web application vulnerabilities using fuzzing, SQL injection, and XSS techniques.

xssValidator

A Burp Suite extension that automates XSS vulnerability detection and validation through custom payload generation and response analysis.

findom-xss

A fast and simple DOM based XSS vulnerability scanner

DOMdig

DOMdig is a DOM XSS scanner that uses static analysis, dynamic analysis, and fuzz testing to detect and exploit Cross-Site Scripting vulnerabilities in Single Page Applications.

Femida

Femida is a Python automation tool that integrates with Burp Suite to detect blind XSS vulnerabilities in web applications through HTTP request analysis.

Rexsser

A Burp Suite plugin that extracts keywords from HTTP responses using regex patterns and tests for reflected XSS vulnerabilities within the target scope.

Xss-Sql-Fuzz

A Burp Suite plugin for automatically adding XSS and SQL payload to fuzz

Greenbone Web App Scanning

Managed web app security scanning service covering OWASP Top 10 vulnerabilities

ImmuniWeb® Neuron

AI-enhanced web app vulnerability scanner with zero false-positive SLA

Escape API Security Platform

DAST platform for API and web app security testing with business logic focus

StackHawk StackHawk

AppSec platform with API discovery, CI/CD-native DAST, and risk oversight

Secure Blink ThreatSpy

DAST platform for web app & API vulnerability scanning with AI-enabled features

Beagle Security AI Pentesting Platform

AI-powered automated penetration testing platform for web apps, APIs & GraphQL

Qualys TotalAppSec

Cloud-based DAST solution for web app & API security with AI-powered scanning

Bright Security Bright STAR

AI-powered AppSec platform for DAST, IAST, API security with auto-remediation

Fortra BeSTORM

Black box fuzzer and DAST tool for testing application security

Burp Suite Enterprise Edition

An enterprise-scale dynamic application security testing (DAST) platform that provides automated vulnerability scanning and security assessment for web applications.

Rapid7 InsightAppSec

DAST tool for automated web app and API vulnerability scanning and testing

Checkmarx One DAST

Enterprise DAST solution for runtime app and API security testing

Aikido DAST Scanner

DAST scanner that identifies web app vulnerabilities and attack surfaces

ZeroThreat Intelligent Vulnerability Scanner

AI-powered vulnerability scanner for web apps and APIs

ZeroThreat API Penetration Testing Tool

API penetration testing tool for identifying business logic flaws

ZeroThreat Compliance-Ready Security

Web app pentesting platform for GDPR, HIPAA, PCI-DSS compliance monitoring

ZeroThreat Sensitive Data Detection

Detects sensitive data (PII, PHI, PCI) across application stacks

Siemba GenPT

AI-driven DAST tool for automated vulnerability testing of web applications

Escape DAST

AI-powered DAST tool for business logic security testing of web apps and APIs

Escape GraphQL Security Testing

GraphQL-native DAST tool for security testing GraphQL applications

Mend DAST

Dynamic application security testing tool for runtime vulnerability detection

Indusface WAS - Website Vulnerability Scanner

AI-powered DAST scanner for web app vulnerability detection with zero false positives

DerScanner Dynamic Application Security Testing (DAST)

DAST tool that scans live web apps to detect vulnerabilities in real-time

Bright Sec Bright STAR

AI-powered AppSec platform for DAST, IAST, and API security testing

Bright Security Dynamic Application Security Testing

Enterprise DAST platform for web apps, APIs, business logic, and LLM security

Fluid Attacks Dynamic Application Security Testing (DAST)

DAST tool for continuous automated security testing of web and mobile apps

Wallarm API Security Testing

Automated API security testing tool integrated into CI/CD pipelines

Invicti DAST

DAST scanner with proof-based vulnerability validation and CI/CD integration