# Param Miner

Param Miner is a Penetration Testing product. It runs on-premises. Pricing is free.

A command-line tool that identifies and extracts parameters from HTTP requests and responses to assist with web application security testing and vulnerability assessment.

Checked October 2026.

## What is Param Miner?

Param Miner is a command-line tool designed for identifying and extracting parameters from HTTP requests and responses during web application security testing.

The tool scans HTTP traffic to discover hidden or undocumented parameters that may not be immediately visible through standard web application interfaces. This capability helps security professionals identify potential attack vectors and vulnerabilities that could be exploited through parameter manipulation.

Param Miner operates by analyzing HTTP communications and extracting parameter data for further security analysis. The tool supports vulnerability assessment workflows by providing detailed parameter information that can reveal security weaknesses in web applications.

The extracted parameter data can be used to identify potential security issues such as parameter pollution, hidden functionality, or unvalidated input fields that could lead to various web application vulnerabilities.

Tags: Web Security

## Quick facts

- Category: [Offensive Security](https://cybersectools.com/categories/offensive-security-testing) · [Penetration Testing](https://cybersectools.com/categories/pentesting-tools)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 1,366
- Website: github.com

## Param Miner FAQ

### What is Param Miner?

Param Miner is a product in the Penetration Testing category. It covers Web Security.

### What is the pricing for Param Miner?

Param Miner is free. Download and setup instructions are at https://github.com/PortSwigger/param-miner/.

### What are alternatives to Param Miner?

Alternatives to Param Miner listed on CybersecTools:

1. [Web Application Penetration Testing​](https://cybersectools.com/tools/web-application-penetration-testing) - Real-world web app testing to uncover logic flaws, access gaps, and hidden risks. (Commercial)
2. [Novee AI Pentesting](https://cybersectools.com/tools/novee-ai-pentesting) - AI-driven continuous penetration testing platform with automated remediation. (Commercial)
3. [Tenzai](https://cybersectools.com/tools/tenzai) - Agentic AI platform for continuous, autonomous penetration testing of enterprise apps. (Commercial)
4. [Capture The Bug PTaaS](https://cybersectools.com/tools/capture-the-bug-ptaas) - CREST-certified PTaaS platform for continuous web, API, and cloud pentesting. (Commercial)
5. [GlitchSecure](https://cybersectools.com/tools/glitchsecure) - Continuous DAST and real-time human-verified penetration testing for SaaS. (Commercial)

Compare all Param Miner alternatives at [https://cybersectools.com/alternatives/param-miner](https://cybersectools.com/alternatives/param-miner)

### What deployment and organization size does Param Miner fit?

Param Miner is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare Param Miner with similar solutions

- [Param Miner vs Web Application Penetration Testing​](https://cybersectools.com/compare/param-miner-vs-web-application-penetration-testing)
- [Param Miner vs Novee AI Pentesting](https://cybersectools.com/compare/novee-ai-pentesting-vs-param-miner)
- [Param Miner vs Tenzai](https://cybersectools.com/compare/param-miner-vs-tenzai)

All alternatives to Param Miner: [/alternatives/param-miner](https://cybersectools.com/alternatives/param-miner)

---

Source: https://cybersectools.com/tools/param-miner

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Param Miner: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md