# Wapiti

Wapiti is a Dynamic Application Security Testing product. It runs on-premises. Pricing is free.

Web-application vulnerability scanner with extensive coverage of security testing modules.

## What is Wapiti?

The web-application vulnerability scanner Wapiti allows you to audit the security of your websites or web applications. It performs 'black-box' scans by crawling webpages, looking for scripts and forms to inject data, and acts like a fuzzer to test vulnerabilities. Wapiti modules cover SQL Injections, Cross Site Scripting, File disclosure, Command Execution, XXE injection, CRLF Injection, Shellshock, Server Side Request Forgery, and more.

Tags: SQL Injection, Web Security, XSS

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.
- [Protect](https://cybersectools.com/guides/building-protect-program-small-team): helps you prevent attacks and keep data safe.

## Quick facts

- Category: [Application Security](https://cybersectools.com/categories/application-security) · [Dynamic Application Security Testing](https://cybersectools.com/categories/dast)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- Website: wapiti.sourceforge.net

## Where it ranks

Wapiti is not a pick on the current [Best DAST Solutions for Business](https://cybersectools.com/shortlists/best-dast-solutions).

## Wapiti FAQ

### What is Wapiti?

Wapiti is a product in the Dynamic Application Security Testing category. It covers SQL Injection, Web Security and XSS.

### What is the pricing for Wapiti?

Wapiti is free. Download and setup instructions are at https://wapiti.sourceforge.net/.

### What are alternatives to Wapiti?

Alternatives to Wapiti listed on CybersecTools:

1. [Fortra BeSTORM](https://cybersectools.com/tools/fortra-bestorm) - Black box fuzzer and DAST product for application security testing (Commercial)
2. [Halo Security Application Scanning](https://cybersectools.com/tools/halo-security-application-scanning) - DAST tool for detecting web app vulnerabilities like SQL injection and XSS (Commercial)
3. [VulnSign Dynamic Application Security Testing](https://cybersectools.com/tools/vulnsign-dynamic-application-security-testing) - DAST tool for scanning web apps, microservices, and APIs for vulnerabilities (Commercial)
4. [Acunetix Web Application & API Security](https://cybersectools.com/tools/acunetix-web-application-and-api-security) - DAST scanner for web apps & APIs with automated vuln detection & remediation (Commercial)
5. [EnProbe Cybersecurity](https://cybersectools.com/tools/enprobe-cybersecurity) - Cloud-based vulnerability assessment tool for web application security (Commercial)

Compare all Wapiti alternatives at [https://cybersectools.com/alternatives/wapiti](https://cybersectools.com/alternatives/wapiti)

### What deployment and organization size does Wapiti fit?

Wapiti is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare Wapiti with similar solutions

- [Wapiti vs Fortra BeSTORM](https://cybersectools.com/compare/fortra-bestorm-vs-wapiti)
- [Wapiti vs Halo Security Application Scanning](https://cybersectools.com/compare/halo-security-application-scanning-vs-wapiti)
- [Wapiti vs VulnSign Dynamic Application Security Testing](https://cybersectools.com/compare/vulnsign-dynamic-application-security-testing-vs-wapiti)

All alternatives to Wapiti: [/alternatives/wapiti](https://cybersectools.com/alternatives/wapiti)

---

Source: https://cybersectools.com/tools/wapiti

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Wapiti: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md