12,273 tools · Updated daily · Most free, no account
Free Security Tools
Latest added scans
SeverityScan nameAdded
MediumCVE-2025-23876 ScannerCVE-2025-23876 Scanner - Cross-Site Scripting (XSS) vulnerability in WP krpano Plugin for WordPress
just nowMediumCVE-2020-24900 ScannerCVE-2020-24900 Scanner - Cross-Site Scripting (XSS) vulnerability in Krpano Panorama Viewer
just nowMediumCVE-2020-24901 ScannerCVE-2020-24901 Scanner - Cross-Site Scripting (XSS) vulnerability in Krpano Panorama Viewer
just nowCriticalGeneric Command Injection Vulnerability ScannerA command injection vulnerability occurs when an attacker is able to pass malicious input to a program and have that input executed as an OS command. This can allow attackers to run operation system-level command execution. Command injection is often possible due to insecure coding practices that do not properly validate or sanitize user input.
7 days agoInfoPHP End-of-Life Detection ScannerThis scanner detects the use of PHP versions in digital assets. It identifies instances where PHP versions have surpassed their End-of-Life (EOL) and no longer receive security updates.
9 days agoNeed to run all checks at once?
Start Full Scan →- Free URL Fuzzer Online Discovers hidden endpoints, files, and directories via automated path fuzzing.
- SQL Injection Vulnerability Scanner Detects SQL injection flaws across inputs, parameters, and API endpoints.
- XSS Scanner Identifies reflected, stored, and DOM-based cross-site scripting vulnerabilities.
- Subdomain Finder Online Discovers the subdomains of a target domain and maps its attack surface.
- SSRF Vulnerability Scanner Detects server-side request forgery vulnerabilities.
- LFI / RFI Vulnerability Scanner Finds local and remote file inclusion flaws.
- Command Injection Scanner Finds OS command execution vulnerabilities.
- SSL/TLS Supported Cipher Checker Analyzes supported ciphers and flags weak encryption protocols.
- WAF Detection Scanner Identifies which web application firewall protects a target.
- Technology Detection Scanner Maps the full tech stack CMS, frameworks, server software.
- PCI-DSS 6.4.3 Compliance Checker Validates payment page script integrity under PCI-DSS v4.0.