Vulnerability Assessment Tools
Vulnerability assessment tools that scan, prioritize, and drive remediation programs across assets.
Browse 180 vulnerability assessment tools
FEATURED
USE CASES
A standalone Python script that audits system configurations against CIS Hardening Benchmarks to assess compliance readiness without requiring installation or dependencies.
A collection of Ansible roles for hardening various systems and services
A runtime threat management and attack path enumeration tool for cloud-native environments
A Go-based crash analysis tool that processes and reproduces crash files from fuzzing tools like AFL with multiple debugging engines and output formats.
Script to find exploits for vulnerable software packages on Linux systems using an exploit database.
CVE Ape is an open source tool that creates a local CVE database from the National Vulnerability Database for offline vulnerability searching by package name, vendor, or OS components.
Check for known vulnerabilities in your Node.js installation.
PlumHound is a reporting engine that converts BloodHoundAD's Neo4J queries into operational security reports for analyzing Active Directory vulnerabilities and attack paths.
Linux Exploit Suggester; suggests possible exploits based on the Linux operating system release number.
Compares target's patch levels against Microsoft vulnerability database and detects missing patches.
A tool that showcases the attack surface of a given Android device, highlighting potential vulnerabilities and security risks.
An open-source tool that automates the detection and analysis of DLL hijacking vulnerabilities in Windows applications, providing detailed reports and remediation guidance.
Vulnerability Assessment Tools FAQ
Common questions about Vulnerability Assessment tools, selection guides, pricing, and comparisons.
Vulnerability assessment is the process of scanning systems to identify security weaknesses. Vulnerability management is the complete lifecycle: scanning, prioritizing based on risk, assigning remediation to teams, tracking fix timelines, verifying remediation, and reporting on program metrics. Assessment is one step; management is the ongoing program that ensures findings actually get fixed.
