Wapiti
Web-application vulnerability scanner with extensive coverage of security testing modules.
Application SecurityDynamic Application Security TestingOn-PremisesStartup · SMB · Mid-Market · EnterpriseFree
Web-application vulnerability scanner with extensive coverage of security testing modules.
The web-application vulnerability scanner Wapiti allows you to audit the security of your websites or web applications. It performs 'black-box' scans by crawling webpages, looking for scripts and forms to inject data, and acts like a fuzzer to test vulnerabilities. Wapiti modules cover SQL Injections, Cross Site Scripting, File disclosure, Command Execution, XXE injection, CRLF Injection, Shellshock, Server Side Request Forgery, and more.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Wapiti: features, pricing and alternatives.
Wapiti is a product in the Dynamic Application Security Testing category. It covers SQL Injection, Web Security and XSS.
Wapiti is free. Download and setup instructions are at https://wapiti.sourceforge.net/.
Alternatives to Wapiti listed on CybersecTools:
Compare all Wapiti alternatives at https://cybersectools.com/alternatives/wapiti
Wapiti is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
DAST tool for scanning web apps, microservices, and APIs for vulnerabilities
w3af is an open source web application security scanner that identifies over 200 types of vulnerabilities including XSS, SQL injection, and OS commanding in web applications.
Automated API security testing tool integrated into CI/CD pipelines
Suite of web security tools, platforms, and open-source frameworks.
A Burp Suite plugin for automatically adding XSS and SQL payload to fuzz
A Burp Suite extension that automates XSS vulnerability detection and validation through custom payload generation and response analysis.
On our shortlist?
Wapiti is not a pick on the current Best DAST Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
