Faraday
Faraday is a vulnerability management and collaboration platform designed to streamline security assessment workflows and vulnerability tracking. The platform provides centralized vulnerability management capabilities with the following key functionalities: - Integration with over 150 security scanning tools for automated data ingestion - Vulnerability deduplication and normalization of data from multiple sources - Task and methodology management for organizing security assessments - Customizable workflows and automation capabilities for vulnerability response - Built-in reporting features for generating executive and technical reports - Asset management and tracking capabilities - Integration with ticketing systems like Jira and ServiceNow - Support for custom fields and vulnerability templates - Evidence management and documentation features - Multi-user collaboration with role-based access control - API access and CLI tool for automation - Continuous scanning capabilities through agent technology The platform can be deployed on-premises, in the cloud, or in hybrid environments. It includes features for vulnerability prioritization, asset discovery, and security metrics visualization through customizable dashboards.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Automate OSINT for threat intelligence and attack surface mapping with SpiderFoot.
Automate Google Hacking Database scraping and searching with Pagodo, a tool for finding vulnerabilities and sensitive information.
A search engine for the Internet of Things (IoT) that provides real-time information about connected devices.
Crt.sh is a website that allows users to search for SSL/TLS certificates of a targeted domain, providing transparency into certificate logs.
A fully customizable, offensive security reporting solution for pentesters, red teamers, and other security professionals.
All-in-one vulnerability intelligence platform for prioritizing remediation efforts and driving security strategies.
Simple script to check a domain's email protections and identify vulnerabilities.
Amass by OWASP performs comprehensive attack surface mapping and asset discovery.
PINNED
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.