Top picks: w3af, ParamPamPam, Rexsser — plus 45 more compared.
Application SecurityEvaluating Femida alternatives comes down to matching Application Security capabilities to your environment, integrations, and budget rather than chasing feature parity. The options below are compared on what actually drives a switch: coverage, deployment fit, pricing, and real reviews from security teams. Independent and vendor-neutral: we never sell rankings.
Femida is a free Dynamic Application Security Testing tool. Security professionals most commonly compare it with w3af, ParamPamPam, Rexsser, VulnSign Dynamic Application Security Testing, and EnProbe Cybersecurity. All 48 alternatives are matched by shared capabilities, tags, and NIST CSF 2.0 coverage.
A closer look at the 8 most relevant alternatives and competitors to Femida, including their key features and shared capabilities.
w3af is an open source web application security scanner that identifies over 200 types of vulnerabilities including XSS, SQL injection, and OS commanding in web applications.
ParamPamPam is an open-source tool that detects and exploits web application vulnerabilities using fuzzing, SQL injection, and XSS techniques.
A Burp Suite plugin that extracts keywords from HTTP responses using regex patterns and tests for reflected XSS vulnerabilities within the target scope.
DAST tool for scanning web apps, microservices, and APIs for vulnerabilities
Cloud-based vulnerability assessment tool for web application security
DAST scanner for Single Page Applications using headless browser technology
DAST tool for detecting web app vulnerabilities like SQL injection and XSS
DAST tool for scanning web apps and APIs for OWASP Top 10 vulnerabilities
w3af is an open source web application security scanner that identifies over 200 types of vulnerabilities including XSS, SQL injection, and OS commanding in web applications.
ParamPamPam is an open-source tool that detects and exploits web application vulnerabilities using fuzzing, SQL injection, and XSS techniques.
A Burp Suite plugin that extracts keywords from HTTP responses using regex patterns and tests for reflected XSS vulnerabilities within the target scope.
DAST tool for scanning web apps, microservices, and APIs for vulnerabilities
Cloud-based vulnerability assessment tool for web application security
DAST scanner for Single Page Applications using headless browser technology
DAST tool for detecting web app vulnerabilities like SQL injection and XSS
DAST tool for scanning web apps and APIs for OWASP Top 10 vulnerabilities
Automated web vulnerability scanner for SQLi, XSS, and other web app flaws
DAST scanner for web apps & APIs with automated vuln detection & remediation
Suite of web security tools, platforms, and open-source frameworks.
A tool to find XSS vulnerabilities in web applications
ZAP is an open-source web application security scanner that helps identify vulnerabilities through automated scanning and manual testing capabilities.
A Java based HTTP/HTTPS proxy for assessing web application vulnerability with various useful features.
Web-application vulnerability scanner with extensive coverage of security testing modules.
A web security tool that scans for vulnerabilities and known attacks.
A Burp Suite extension that automates XSS vulnerability detection and validation through custom payload generation and response analysis.
A fast and simple DOM based XSS vulnerability scanner
DOMdig is a DOM XSS scanner that uses static analysis, dynamic analysis, and fuzz testing to detect and exploit Cross-Site Scripting vulnerabilities in Single Page Applications.
A Burp Suite plugin for automatically adding XSS and SQL payload to fuzz
Managed web app security scanning service covering OWASP Top 10 vulnerabilities
AI-enhanced web app vulnerability scanner with zero false-positive SLA
DAST platform for API and web app security testing with business logic focus
AppSec platform with API discovery, CI/CD-native DAST, and risk oversight
DAST platform for web app & API vulnerability scanning with AI-enabled features
AI-powered automated penetration testing platform for web apps, APIs & GraphQL
Cloud-based DAST solution for web app & API security with AI-powered scanning
AI-powered AppSec platform for DAST, IAST, API security with auto-remediation
Black box fuzzer and DAST tool for testing application security
An enterprise-scale dynamic application security testing (DAST) platform that provides automated vulnerability scanning and security assessment for web applications.
DAST tool for automated web app and API vulnerability scanning and testing
Enterprise DAST solution for runtime app and API security testing
DAST scanner that identifies web app vulnerabilities and attack surfaces
AI-powered vulnerability scanner for web apps and APIs
API penetration testing tool for identifying business logic flaws
Web app pentesting platform for GDPR, HIPAA, PCI-DSS compliance monitoring
Detects sensitive data (PII, PHI, PCI) across application stacks
AI-driven DAST tool for automated vulnerability testing of web applications
AI-powered DAST tool for business logic security testing of web apps and APIs
GraphQL-native DAST tool for security testing GraphQL applications
Dynamic application security testing tool for runtime vulnerability detection
AI-powered DAST scanner for web app vulnerability detection with zero false positives
DAST tool that scans live web apps to detect vulnerabilities in real-time
AI-powered AppSec platform for DAST, IAST, and API security testing
Enterprise DAST platform for web apps, APIs, business logic, and LLM security
DAST tool for continuous automated security testing of web and mobile apps
Common questions security professionals ask when evaluating alternatives and competitors to Femida.
The most popular alternatives to Femida include w3af, ParamPamPam, Rexsser, VulnSign Dynamic Application Security Testing, and EnProbe Cybersecurity. These Dynamic Application Security Testing tools offer similar capabilities and are frequently compared by security professionals evaluating their options.
There are 48 alternatives to Femida listed on CybersecTools, all within the Dynamic Application Security Testing category. Each alternative is matched based on shared capabilities, tags, and NIST CSF coverage areas.
Femida is a free Dynamic Application Security Testing tool. You can use it at no cost. Both free and commercial alternatives are available for comparison.
Femida is a Dynamic Application Security Testing tool within the broader Application Security category. It is used by security professionals for dynamic application security testing capabilities and can be compared against 48 similar tools.
