12,297 tools · Updated daily · Most free, no account
Free Security Tools
Latest added scans
SeverityScan nameAdded
CriticalCVE-2026-111497 Node2Shell ScannerDetects CVE-2026-111497 (Node2Shell), a Brotli decompression buffer overflow affecting Node.js applications that may lead to memory corruption, denial of service, or remote code execution.
1 day agoHighCVE-2026-39363 ScannerCVE-2026-39363 Scanner - Arbitrary File Read vulnerability in Vite Dev Server
3 days agoMediumCVE-2025-23876 Scanner (Version Based)CVE-2025-23876 Scanner - Cross-Site Scripting (XSS) vulnerability in WP krpano Plugin for WordPress
3 days agoMediumCVE-2026-16065 ScannerCVE-2026-16065 Scanner - SQL Injection vulnerability in Welcart e-Commerce
4 days agoCriticalCVE-2025-49387 ScannerCVE-2025-49387 Scanner - Arbitrary File Upload vulnerability in Drag and Drop File Upload for Elementor Forms
4 days agoNeed to run all checks at once?
Start Full Scan →- Free URL Fuzzer Online Discovers hidden endpoints, files, and directories via automated path fuzzing.
- SQL Injection Vulnerability Scanner Detects SQL injection flaws across inputs, parameters, and API endpoints.
- XSS Scanner Identifies reflected, stored, and DOM-based cross-site scripting vulnerabilities.
- Subdomain Finder Online Discovers the subdomains of a target domain and maps its attack surface.
- SSRF Vulnerability Scanner Detects server-side request forgery vulnerabilities.
- LFI / RFI Vulnerability Scanner Finds local and remote file inclusion flaws.
- Command Injection Scanner Finds OS command execution vulnerabilities.
- SSL/TLS Supported Cipher Checker Analyzes supported ciphers and flags weak encryption protocols.
- WAF Detection Scanner Identifies which web application firewall protects a target.
- Technology Detection Scanner Maps the full tech stack CMS, frameworks, server software.
- PCI-DSS 6.4.3 Compliance Checker Validates payment page script integrity under PCI-DSS v4.0.