WhatWeb
WhatWeb identifies websites. Its goal is to answer the question, "What is that Website?". WhatWeb recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1800 plugins, each to recognise something different. WhatWeb also identifies version numbers, email addresses, account IDs, web servers, and other information. WhatWeb is a next-generation web scanner developed by Andrew Horton (urbanadventurer) and Brendan Coles (bcoles). For more information about WhatWeb visit: https://morningstarsecurity.com/research/whatweb
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
AWS Web Application Firewall (WAF) for protecting web applications from common exploits.
A privacy-focused CAPTCHA alternative that protects websites from bot attacks using proof-of-work challenges and AI-based detection while maintaining GDPR compliance.
A tool to conduct preliminary security checks in code, infrastructure, or IAM configurations using various open-source tools.
Utility for comparing control flow graph signatures to Android methods with scanning capabilities for malicious applications.
JavaScript parser, minifier, compressor, and beautifier toolkit with simplified API and CLI.
A cloud-based DAST solution that discovers, inventories, and tests web applications and APIs for security vulnerabilities across diverse environments.
A tool for identifying potential security vulnerabilities in dependency configurations by checking for lingering free namespaces for private package names.
WPRecon is a tool for recognizing vulnerabilities and blackbox information for WordPress.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.