CybersecTools

The world's largest cybersecurity product directory. 9,000+ products, real market intelligence, and competitive insights to help you find, evaluate, and optimize your security stack.

Operated by:

Mandos Cyber

KVK: 97994448

Address: 124, 1230 AC, LOOSDRECHT, Netherlands

VAT: NL005301434B12

Copyright © 2026 - All rights reserved

DISCOVER

All Categories Enterprise Tools Compare Tools Popular Tools All Tools Enterprise Stacks Free Tools Alternatives Service Providers Market Map Browse by Use Case

TOP CATEGORIES

AI Security Cloud Security Endpoint Security Application Security Network Security Identity & Access Data Security

SERVICES

CISO Lens (Mandos)MCP Access (AI Data)Get Listed Badges

COMPANY

About Methodology Resources Contact Us llms.txt Terms of Service Privacy Policy

Map
Resources
AI Access

48 Best findom-xss Alternatives & Competitors (2026) | CybersecTools

Home
Alternatives
findom-xss

Best findom-xss Alternatives & Competitors in 2026

Top picks: VulnSign Dynamic Application Security Testing, ZeroThreat Sensitive Data Detection, EnProbe Cybersecurity — plus 45 more compared.

Application Security

Evaluating findom-xss alternatives comes down to matching Application Security capabilities to your environment, integrations, and budget rather than chasing feature parity. The options below are compared on what actually drives a switch: coverage, deployment fit, pricing, and real reviews from security teams. Independent and vendor-neutral: we never sell rankings.

findom-xss Alternatives and Competitors

findom-xss is a free Dynamic Application Security Testing tool. Security professionals most commonly compare it with VulnSign Dynamic Application Security Testing, ZeroThreat Sensitive Data Detection, EnProbe Cybersecurity, AppCheck SPA Scanner, and Halo Security Application Scanning. All 48 alternatives are matched by shared capabilities, tags, and NIST CSF 2.0 coverage.

Looking for free options across categories? See our curated roundup of application security tools and other open source picks→ Free & Open Source Tools

Data verified Jun 2026

View findom-xss All Application Security Compare Stacks Market Map Explore All Tools

ADYour product here. Reach security decision-makers.Launch a campaign

Top findom-xss Alternatives and Competitors at a Glance

A closer look at the 8 most relevant alternatives and competitors to findom-xss, including their key features and shared capabilities.

VulnSign Dynamic Application Security Testing

Commercial

Dynamic Application Security Testing

DAST tool for scanning web apps, microservices, and APIs for vulnerabilities

Key features: OWASP Top 10 vulnerability testing, Advanced website crawling for script-heavy sites, Authentication configuration for password and MFA-protected areas, Out-of-band vulnerability detection via VulnSign Radar, Real-time scan monitoring and instant results

View VulnSign Dynamic Application Security Testing|VulnSign Dynamic Application Security Testing alternatives|Compare VulnSign Dynamic Application Security Testing

ZeroThreat Sensitive Data Detection

Commercial

Dynamic Application Security Testing

Detects sensitive data (PII, PHI, PCI) across application stacks

Key features: PII detection, PHI detection, PCI data detection, Application stack scanning, GDPR compliance support

View ZeroThreat Sensitive Data Detection|ZeroThreat Sensitive Data Detection alternatives|Compare ZeroThreat Sensitive Data Detection

EnProbe Cybersecurity

Commercial

Dynamic Application Security Testing

Cloud-based vulnerability assessment tool for web application security

Key features: Scans for 100+ attack types including OWASP Top 10, XSS, SQLi, and XSRF, Encrypted comprehensive vulnerability reports delivered via email, Scheduled vulnerability scanning, Multi-platform support for Ruby on Rails, PHP, Java and other web languages, Stack-independent scanning including AJAX and JavaScript-based websites

View EnProbe Cybersecurity|EnProbe Cybersecurity alternatives|Compare EnProbe Cybersecurity

AppCheck SPA Scanner

Commercial

Dynamic Application Security Testing

DAST scanner for Single Page Applications using headless browser technology

Key features: Headless browser-based scanning, Event-based crawler for SPAs, Framework-agnostic scanning (Angular, Vue.js, React), Scripted authentication including TOTP, Multi-domain scanning for frontend and backend

View AppCheck SPA Scanner|AppCheck SPA Scanner alternatives|Compare AppCheck SPA Scanner

Halo Security Application Scanning

Commercial

Dynamic Application Security Testing

DAST tool for detecting web app vulnerabilities like SQL injection and XSS

Key features: OWASP Top 10 vulnerability detection, SQL Injection detection, Cross-Site Scripting (XSS) detection, Cross-Site Request Forgery (CSRF) detection, SANS CWE TOP 25 detection

View Halo Security Application Scanning|Halo Security Application Scanning alternatives|Compare Halo Security Application Scanning

Intruder Web Application Scanning

Commercial

Dynamic Application Security Testing

DAST tool for scanning web apps and APIs for OWASP Top 10 vulnerabilities

Key features: Automated scanning for OWASP Top 10 vulnerabilities, Checks for 75+ application vulnerabilities, 140,000+ infrastructure security checks, Authenticated and unauthenticated scanning, Single-page application (SPA) and multi-page application (MPA) support

View Intruder Web Application Scanning|Intruder Web Application Scanning alternatives|Compare Intruder Web Application Scanning

SaltyCloud Dorkbot

Commercial

Dynamic Application Security Testing

Automated web vulnerability scanner for SQLi, XSS, and other web app flaws

Key features: Automated vulnerability scanning, SQL injection detection, Cross-site scripting (XSS) detection, Operating system injection detection, Remote and local file inclusion detection

View SaltyCloud Dorkbot|SaltyCloud Dorkbot alternatives|Compare SaltyCloud Dorkbot

Acunetix Web Application & API Security

Commercial

Dynamic Application Security Testing

DAST scanner for web apps & APIs with automated vuln detection & remediation

Key features: Automated web application and API discovery and crawling, Detection of 12,000+ vulnerabilities including zero-days, Blended DAST and IAST scanning, AI/ML-based Predictive Risk Scoring, Proof of exploit to eliminate false positives

View Acunetix Web Application & API Security|Acunetix Web Application & API Security alternatives|Compare Acunetix Web Application & API Security

All 48 Alternatives & Competitors to findom-xss

Compare

VulnSign Dynamic Application Security Testing

DAST tool for scanning web apps, microservices, and APIs for vulnerabilities

Dynamic Application Security Testing

Compare

ZeroThreat Sensitive Data Detection

Detects sensitive data (PII, PHI, PCI) across application stacks

Dynamic Application Security Testing

Compare

EnProbe Cybersecurity

Cloud-based vulnerability assessment tool for web application security

Dynamic Application Security Testing

Compare

AppCheck SPA Scanner

DAST scanner for Single Page Applications using headless browser technology

Dynamic Application Security Testing

Compare

Halo Security Application Scanning

DAST tool for detecting web app vulnerabilities like SQL injection and XSS

Dynamic Application Security Testing

Compare

Intruder Web Application Scanning

DAST tool for scanning web apps and APIs for OWASP Top 10 vulnerabilities

Dynamic Application Security Testing

Compare

SaltyCloud Dorkbot

Automated web vulnerability scanner for SQLi, XSS, and other web app flaws

Dynamic Application Security Testing

Compare

Acunetix Web Application & API Security

DAST scanner for web apps & APIs with automated vuln detection & remediation

Dynamic Application Security Testing

Compare

NightVision Platform

DAST platform for scanning web apps & APIs within CI/CD pipelines.

Dynamic Application Security Testing

Compare

Code Intelligence

AI-automated fuzz testing platform for detecting software vulnerabilities.

Dynamic Application Security Testing

Compare

A tool to find XSS vulnerabilities in web applications

Dynamic Application Security Testing

Free

Compare

w3af is an open source web application security scanner that identifies over 200 types of vulnerabilities including XSS, SQL injection, and OS commanding in web applications.

Dynamic Application Security Testing

Free

Compare

A browser with XSS detection capabilities

Dynamic Application Security Testing

Free

Compare

A Java based HTTP/HTTPS proxy for assessing web application vulnerability with various useful features.

Dynamic Application Security Testing

Free

Compare

Web-application vulnerability scanner with extensive coverage of security testing modules.

Dynamic Application Security Testing

Free

Compare

A web security tool that scans for vulnerabilities and known attacks.

Dynamic Application Security Testing

Free

Compare

ParamPamPam is an open-source tool that detects and exploits web application vulnerabilities using fuzzing, SQL injection, and XSS techniques.

Dynamic Application Security Testing

Free

Compare

A Burp Suite extension that automates XSS vulnerability detection and validation through custom payload generation and response analysis.

Dynamic Application Security Testing

Free

Compare

DOMdig is a DOM XSS scanner that uses static analysis, dynamic analysis, and fuzz testing to detect and exploit Cross-Site Scripting vulnerabilities in Single Page Applications.

Dynamic Application Security Testing

Free

Compare

Femida is a Python automation tool that integrates with Burp Suite to detect blind XSS vulnerabilities in web applications through HTTP request analysis.

Dynamic Application Security Testing

Free

Compare

A Burp Suite plugin that extracts keywords from HTTP responses using regex patterns and tests for reflected XSS vulnerabilities within the target scope.

Dynamic Application Security Testing

Free

Compare

A Burp Suite plugin for automatically adding XSS and SQL payload to fuzz

Dynamic Application Security Testing

Free

Compare

dom-based-xss-finder

DOM-based XSS vulnerability scanner

Dynamic Application Security Testing

Free

Compare

Greenbone Web App Scanning

Managed web app security scanning service covering OWASP Top 10 vulnerabilities

Dynamic Application Security Testing

Compare

ImmuniWeb® Neuron

AI-enhanced web app vulnerability scanner with zero false-positive SLA

Dynamic Application Security Testing

Compare

Escape API Security Platform

DAST platform for API and web app security testing with business logic focus

Dynamic Application Security Testing

Compare

StackHawk StackHawk

AppSec platform with API discovery, CI/CD-native DAST, and risk oversight

Dynamic Application Security Testing

Compare

Secure Blink ThreatSpy

DAST platform for web app & API vulnerability scanning with AI-enabled features

Dynamic Application Security Testing

Compare

Beagle Security AI Pentesting Platform

AI-powered automated penetration testing platform for web apps, APIs & GraphQL

Dynamic Application Security Testing

Compare

Qualys TotalAppSec

Cloud-based DAST solution for web app & API security with AI-powered scanning

Dynamic Application Security Testing

Compare

Bright Security Bright STAR

AI-powered AppSec platform for DAST, IAST, API security with auto-remediation

Dynamic Application Security Testing

Compare

Black box fuzzer and DAST tool for testing application security

Dynamic Application Security Testing

Compare

Burp Suite Enterprise Edition

An enterprise-scale dynamic application security testing (DAST) platform that provides automated vulnerability scanning and security assessment for web applications.

Dynamic Application Security Testing

Compare

Rapid7 InsightAppSec

DAST tool for automated web app and API vulnerability scanning and testing

Dynamic Application Security Testing

Compare

Checkmarx One DAST

Enterprise DAST solution for runtime app and API security testing

Dynamic Application Security Testing

Compare

Aikido DAST Scanner

DAST scanner that identifies web app vulnerabilities and attack surfaces

Dynamic Application Security Testing

Compare

ZeroThreat Intelligent Vulnerability Scanner

AI-powered vulnerability scanner for web apps and APIs

Dynamic Application Security Testing

Compare

ZeroThreat API Penetration Testing Tool

API penetration testing tool for identifying business logic flaws

Dynamic Application Security Testing

Compare

ZeroThreat Compliance-Ready Security

Web app pentesting platform for GDPR, HIPAA, PCI-DSS compliance monitoring

Dynamic Application Security Testing

Compare

AI-driven DAST tool for automated vulnerability testing of web applications

Dynamic Application Security Testing

Compare

AI-powered DAST tool for business logic security testing of web apps and APIs

Dynamic Application Security Testing

Compare

Escape GraphQL Security Testing

GraphQL-native DAST tool for security testing GraphQL applications

Dynamic Application Security Testing

Compare

Dynamic application security testing tool for runtime vulnerability detection

Dynamic Application Security Testing

Compare

Indusface WAS - Website Vulnerability Scanner

AI-powered DAST scanner for web app vulnerability detection with zero false positives

Dynamic Application Security Testing

Compare

DerScanner Dynamic Application Security Testing (DAST)

DAST tool that scans live web apps to detect vulnerabilities in real-time

Dynamic Application Security Testing

Compare

Bright Sec Bright STAR

AI-powered AppSec platform for DAST, IAST, and API security testing

Dynamic Application Security Testing

Compare

Bright Security Dynamic Application Security Testing

Enterprise DAST platform for web apps, APIs, business logic, and LLM security

Dynamic Application Security Testing

Compare

Fluid Attacks Dynamic Application Security Testing (DAST)

DAST tool for continuous automated security testing of web and mobile apps

Dynamic Application Security Testing

Also compare alternatives to:

VulnSign Dynamic Application Security Testing alternatives ZeroThreat Sensitive Data Detection alternatives EnProbe Cybersecurity alternatives AppCheck SPA Scanner alternatives Halo Security Application Scanning alternatives Intruder Web Application Scanning alternatives SaltyCloud Dorkbot alternatives Acunetix Web Application & API Security alternatives NightVision Platform alternatives Code Intelligence alternatives BruteXSS alternatives w3af alternatives

Compare findom-xss with:

findom-xss vs VulnSign Dynamic Application Security Testing findom-xss vs ZeroThreat Sensitive Data Detection findom-xss vs EnProbe Cybersecurity findom-xss vs AppCheck SPA Scanner findom-xss vs Halo Security Application Scanning findom-xss vs Intruder Web Application Scanning findom-xss vs SaltyCloud Dorkbot findom-xss vs Acunetix Web Application & API Security

findom-xss Alternatives FAQ

Common questions security professionals ask when evaluating alternatives and competitors to findom-xss.

What are the best alternatives to findom-xss?

The most popular alternatives to findom-xss include VulnSign Dynamic Application Security Testing, ZeroThreat Sensitive Data Detection, EnProbe Cybersecurity, AppCheck SPA Scanner, and Halo Security Application Scanning. These Dynamic Application Security Testing tools offer similar capabilities and are frequently compared by security professionals evaluating their options.

How many alternatives to findom-xss are available?

There are 48 alternatives to findom-xss listed on CybersecTools, all within the Dynamic Application Security Testing category. Each alternative is matched based on shared capabilities, tags, and NIST CSF coverage areas.

Is findom-xss free or commercial?

findom-xss is a free Dynamic Application Security Testing tool. You can use it at no cost. Both free and commercial alternatives are available for comparison.

What type of tool is findom-xss?

findom-xss is a Dynamic Application Security Testing tool within the broader Application Security category. It is used by security professionals for dynamic application security testing capabilities and can be compared against 48 similar tools.

Have more questions? Browse our categories or search for specific tools.

FEATURED

Threat & Vulnerability Management

Strike48 Platform

Security Operations

Daylight Security

Security Operations

AdvertiseReach decision-makers with Click ads

TRENDING CATEGORIES

Penetration Testing

Penetration testing tools and PTaaS for point-in-time manual or assisted pentests that produce a findings report.

Digital Forensics

Digital forensics tools whose primary job is to collect, preserve, and analyze evidence after the fact.

Threat Intel Platforms

Threat Intelligence Platforms (TIP) that aggregate and operationalize intel, including IOC management and integration.

Honeypots & Deception

Honeypots and cyber deception solutions that simulate vulnerable systems to detect, divert, and analyze attacker activities in real time.

Detection Engineering

Detection engineering and detection-as-code platforms for authoring, managing, testing, translating, sharing, and deploying detection rules and content (Sigma, YARA, Suricata, SIEM/EDR correlation rules) across the SOC. Includes detection rule repositories, generators, converters, and rule-management tooling.

View All Categories →

POPULAR

Vulnerability Assessment

OSINTLeak Real-time OSINT Leak Intelligence

Digital Risk Protection

Threat Intel Feeds

TestSavant AI Security Assurance Platform

Fabric Platform by BlackStork

Security Orchestration Automation and Response

View Popular Tools →