The product
A runtime threat management and attack path enumeration tool for cloud-native environments
The closest ThreatMapper alternatives are Fortra VM, Zentara AVAS and UVM: Unified Vulnerability Management. Picking a ThreatMapper alternative comes down to fit: Vulnerability Assessment coverage, your environment, your integrations and your budget. So each option below shows what it covers, how it deploys, its pricing model and the company behind it.
46 alternativesClosest matches: Fortra VM, Zentara AVAS, UVM: Unified Vulnerability ManagementPage updated Nov 2026
The product
A runtime threat management and attack path enumeration tool for cloud-native environments
ThreatMapper is a free Vulnerability Assessment solution. The closest matches by shared tags and NIST CSF 2.0 coverage are Fortra VM, Zentara AVAS, UVM: Unified Vulnerability Management, XYGATE Aegis Scan, and Orca Cloud Vulnerability Management. All 46 alternatives on this page are ranked the same way.
These 8 solutions overlap most with ThreatMapper. Each row says what the product does and, when the overlap is big enough, which capabilities it shares.
Risk-based vulnerability management platform for scanning and prioritization
Key features: Vulnerability scanning and identification, Risk-based vulnerability prioritization, Threat ranking based on real-world exploitation vectors, Active risk scoring, Network mapping and visualization
View Fortra VMFortra VM alternativesThreatMapper vs Fortra VM
AVAS (Advanced Vulnerability Assessment System) is an AI-driven vulnerability assessment tool that scans networks, applications, cloud assets, APIs, operating systems and firmware for known CVEs and emerging zero-day vulnerabilities. The product uses machine learning-based scanning combined with natural language processing to correlate findings with CVE databases, reduce false positives, and prioritize vulnerabilities based on severity, exploit likelihood, business context, and predictive exploitability signals rather than relying solely on CVSS base scores. Scans are described as parallelized across network, application and cloud components, completing a full enterprise assessment in under fifteen minutes compared to a claimed 3-7 day cycle for traditional tools. Upon scan completion, the embedded ODYSSEY agent generates executive, technical, and compliance reports, maps findings to ISO 27001 and NIST CSF controls, and can create tickets in Jira or ServiceNow with notifications sent to Slack or email. The system also produces auto-generated remediation fix scripts and configuration change recommendations. Scanning methodology is stated to follow OWASP and NIST guidance, and the product holds ISO/IEC 27001, ISO/IEC 42001:2023, and AICPA SOC 2 Type 2 certifications.</description> <parameter name="summary">AI-driven vulnerability assessment scanning networks, apps and cloud in under 15 minutes
Key features: 1 listed. See them on the Zentara AVAS page.
Unifies vuln findings across scanners, prioritizes by risk, routes to fix teams.
Key features: 10 listed. See them on the UVM: Unified Vulnerability Management page.
View UVM: Unified Vulnerability ManagementUVM: Unified Vulnerability Management alternativesThreatMapper vs UVM: Unified Vulnerability Management
Automated vulnerability scanning for HPE NonStop systems
Key features: 10 listed. See them on the XYGATE Aegis Scan page.
View XYGATE Aegis ScanXYGATE Aegis Scan alternativesThreatMapper vs XYGATE Aegis Scan
Agentless cloud vulnerability management with unified context and prioritization
Key features: 10 listed. See them on the Orca Cloud Vulnerability Management page.
View Orca Cloud Vulnerability ManagementOrca Cloud Vulnerability Management alternativesThreatMapper vs Orca Cloud Vulnerability Management
Continuous vulnerability detection and prioritization using CVE database
Key features: 10 listed. See them on the HarfangLab Vulnerability Assessment page.
View HarfangLab Vulnerability AssessmentHarfangLab Vulnerability Assessment alternativesThreatMapper vs HarfangLab Vulnerability Assessment
External server vulnerability scanning for CVEs, patches, and misconfigurations
Key features: 10 listed. See them on the Halo Security Server Scanning page.
View Halo Security Server ScanningHalo Security Server Scanning alternativesThreatMapper vs Halo Security Server Scanning
Customizable vulnerability scanning platform for infrastructure and applications
Key features: 10 listed. See them on the Trickest Vulnerability Scanning page.
View Trickest Vulnerability ScanningTrickest Vulnerability Scanning alternativesThreatMapper vs Trickest Vulnerability Scanning
Risk-based vulnerability management platform for scanning and prioritization
Unifies vuln findings across scanners, prioritizes by risk, routes to fix teams.
Agentless cloud vulnerability management with unified context and prioritization
Continuous vulnerability detection and prioritization using CVE database
External server vulnerability scanning for CVEs, patches, and misconfigurations
Customizable vulnerability scanning platform for infrastructure and applications
Cloud security scanning platform for vulnerability and misconfiguration detection
Agent-based server security monitoring with vulnerability and compliance scanning
Centralized vulnerability intelligence platform with CVE data and risk scoring
Continuous vulnerability scanning with asset discovery and real-time alerts
AI-driven vulnerability detection for hosts, containers, and firmware.
VM platform combining ASM, vuln scanning, and phishing simulation.
VMaaS platform unifying cloud, endpoint & OT vuln scans with CVE prioritization.
Runtime exposure mgmt platform identifying actually exploitable vulnerabilities.
Vulnerability intelligence platform prioritizing CVEs via real-time multi-source data.
Windows suite for network security auditing, vuln scanning, and IT mgmt.
IoT-focused vulnerability intelligence and risk mgmt platform with CVE/CWE assessment.
Cloud-native vulnerability management with runtime context and AI remediation
Infrastructure vulnerability scanner for networks, data centers, and cloud
CVE database with 350K+ vulnerabilities, zero-day tracking, and AI severity
Risk-based vuln mgmt platform using ML to prioritize exploited CVEs
Cloud-native patch management with risk-based prioritization and automation
Automated patch management software for fixing software vulnerabilities
Automated patch management software for Windows, Mac, and third-party apps.
Vulnerability scanner using templates to scan apps, cloud, and networks
Cloud-native vuln mgmt platform with automated patching & remediation
Managed vuln scanning & remediation service covering enterprise IT environments.
Vulnerability scanner for assessing networks, systems, and apps for security flaws.
Evidence-based vuln prioritization platform focused on real-world risk.
AI-powered vuln triage/remediation platform
Russian vulnerability scanner for SMB infra up to 500 hosts, black/white box.
Integrated vulnerability scanner covering system, web, DB, baseline, and weak passwords.
Vuln ops platform that deduplicates, validates, prioritizes, and remediates findings.
All-in-one platform for vuln mgmt, red team ops, and attack surface mgmt
Centralized vuln intelligence platform with aggregation and risk prioritization
Cybersecurity protection platform for SAP systems including S/4HANA and HANA
IT risk mgmt toolkit for network assessment, vuln scanning & compliance
Unified cyber hygiene platform for hardening, PAM, asset mgmt & vuln assessment
VM solution with AI-driven prioritization and automated remediation workflows
Continuous vulnerability assessment and network discovery via endpoint agents
Agentless VM scanning for production environments to detect vulnerabilities
Common questions when weighing alternatives to ThreatMapper.
The closest matches to ThreatMapper by shared tags and NIST CSF 2.0 coverage are Fortra VM, Zentara AVAS, UVM: Unified Vulnerability Management, XYGATE Aegis Scan, and Orca Cloud Vulnerability Management. All of them are Vulnerability Assessment products.
This page shows 46 alternatives to ThreatMapper, all in the Vulnerability Assessment category. Each one is matched on shared tags and NIST CSF 2.0 areas, and the closest matches rank first.
ThreatMapper is a free Vulnerability Assessment product. You can use it at no cost. Only commercial alternatives are listed here. Free and open source products are under /free.
ThreatMapper is a Vulnerability Assessment product in the Exposure & Vulnerability Management category. You can compare it with the 46 other Vulnerability Assessment products on this page.
No Vulnerability Assessment shortlist yet. This is the closest one.
Updated 2026-11-02
See the shortlist
