Security Scanning for Misconfiguration
Security Scanning tools for Misconfiguration: the Security Scanning options most relevant when Misconfiguration is the priority, compared side by side so you can shortlist faster. Filter by pricing or specialization. Independent and vendor-neutral: our scores and rankings are earned, never bought — sponsored placement is always labeled.
We cover 10 cybersecurity tools
FEATURED
USE CASES
Monitors domains for TLS, email auth, DNS, and cert misconfigurations.
Free DNS security scanner that checks domains for misconfigs and exposure.
A security tool that performs whitebox evaluation of S3 object permissions to identify publicly accessible files and generate reports on potential exposure risks.
A security tool for discovering S3 bucket references in web content and testing buckets for misconfigurations.
A Python tool that tests multiple AWS S3 buckets for security misconfigurations including directory listing and upload permissions.
CorsMe is a specialized scanner that identifies Cross-Origin Resource Sharing (CORS) misconfigurations in web applications and provides remediation recommendations.
A security scanner that identifies Cross-Origin Resource Sharing (CORS) misconfigurations in web applications to detect potential vulnerabilities.
A Python-based command-line tool that scans websites for CORS misconfigurations by analyzing HTTP response headers to identify potential security vulnerabilities.
CloudFrunt identifies misconfigured Amazon CloudFront domains that are vulnerable to hijacking due to improper CNAME configuration.
S3Scanner is an open-source tool that scans S3 buckets across S3-compatible APIs to identify misconfigurations and security vulnerabilities.
