Application Security for Xss
Application Security tools for Xss: the Application Security options most relevant when Xss is the priority, compared side by side so you can shortlist faster. Filter by pricing or specialization. Independent and vendor-neutral: our scores and rankings are earned, never bought — sponsored placement is always labeled.
We cover 37 cybersecurity tools
FEATURED
USE CASES
Web application firewall protecting sites from OWASP threats and HTTP flood attacks
Client-side security for monitoring and controlling third-party JavaScript in the browser.
WAAP with sidecar agent; no proxy, no SSL key exposure, sub-1ms decisions.
DAST scanner for web apps & APIs with automated vuln detection & remediation
Automated web vulnerability scanner for SQLi, XSS, and other web app flaws
DAST tool for scanning web apps and APIs for OWASP Top 10 vulnerabilities
DAST tool for detecting web app vulnerabilities like SQL injection and XSS
WAF protecting web apps and APIs from OWASP Top 10 and other threats
DAST scanner for Single Page Applications using headless browser technology
Cloud-based vulnerability assessment tool for web application security
Cloud-based WAF providing web app, API, and bot protection for cloud services
DAST tool for scanning web apps, microservices, and APIs for vulnerabilities
Node.js Goof is a vulnerable Node.js demo application containing multiple security vulnerabilities for testing and educational purposes.
A tool to find XSS vulnerabilities in web applications
A Burp Suite plugin for automatically adding XSS and SQL payload to fuzz
A Burp Suite plugin that extracts keywords from HTTP responses using regex patterns and tests for reflected XSS vulnerabilities within the target scope.
A free online tool to scan for DOM-based XSS vulnerabilities in HTML, JavaScript, and CSS files.
Femida is a Python automation tool that integrates with Burp Suite to detect blind XSS vulnerabilities in web applications through HTTP request analysis.
DOMdig is a DOM XSS scanner that uses static analysis, dynamic analysis, and fuzz testing to detect and exploit Cross-Site Scripting vulnerabilities in Single Page Applications.
A fast and simple DOM based XSS vulnerability scanner
A Burp Suite extension that automates XSS vulnerability detection and validation through custom payload generation and response analysis.
ParamPamPam is an open-source tool that detects and exploits web application vulnerabilities using fuzzing, SQL injection, and XSS techniques.
