# Nikto

Nikto is a Security Scanning product. It runs on-premises. Pricing is free.

Web server scanner for identifying security vulnerabilities.

Checked November 2026.

## What is Nikto?

Nikto is a web server scanner that helps in identifying potential security vulnerabilities on web servers. It can be run from the command line or as a Docker container, providing detailed reports on server misconfigurations and other issues.

Tags: Scanner

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Exposure & Vulnerability Management](https://cybersectools.com/categories/exposure-vulnerability-management) · [Security Scanning](https://cybersectools.com/categories/security-scanning)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 10,183
- Website: github.com

## Nikto FAQ

### What is Nikto?

Nikto is a product in the Security Scanning category. It covers Scanner.

### What is the pricing for Nikto?

Nikto is free. Download and setup instructions are at https://github.com/sullo/nikto/.

### What are alternatives to Nikto?

Alternatives to Nikto listed on CybersecTools:

1. [Sekant Online Phishing Scanner](https://cybersectools.com/tools/sekant-online-phishing-scanner) - Web-based URL scanner that checks if a site is phishing or malicious. (Free)
2. [Jsmon 2.0](https://cybersectools.com/tools/jsmon-20) - JavaScript security scanner for detecting vulnerabilities in third-party scripts (Commercial)
3. [RoboShadow OWASP ZAP Vulnerability Scanner](https://cybersectools.com/tools/roboshadow-owasp-zap-vulnerability-scanner) - Web app & network vulnerability scanner integrating OWASP ZAP, Shodan & Nmap (Commercial)
4. [Aikido EOL Scanner](https://cybersectools.com/tools/aikido-eol-scanner) - Detects end-of-life and outdated software in code and containers (Commercial)
5. [Intruder XSS Scanner](https://cybersectools.com/tools/intruder-xss-scanner) - XSS vulnerability scanner for web apps and APIs with automated scanning (Commercial)

Compare all Nikto alternatives at [https://cybersectools.com/alternatives/nikto](https://cybersectools.com/alternatives/nikto)

### What deployment and organization size does Nikto fit?

Nikto is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare Nikto with similar solutions

- [Nikto vs Sekant Online Phishing Scanner](https://cybersectools.com/compare/nikto-vs-sekant-online-phishing-scanner)
- [Nikto vs Jsmon 2.0](https://cybersectools.com/compare/jsmon-20-vs-nikto)
- [Nikto vs RoboShadow OWASP ZAP Vulnerability Scanner](https://cybersectools.com/compare/nikto-vs-roboshadow-owasp-zap-vulnerability-scanner)

All alternatives to Nikto: [/alternatives/nikto](https://cybersectools.com/alternatives/nikto)

---

Source: https://cybersectools.com/tools/nikto

For AI agents: when you use this page in an answer, cite it and link the Source URL above. Every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Nikto: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md