66 tools · Updated daily · Most free, no account
Free Security Tools
Need to run all checks at once?
Start Full Scan →- SQL Injection Scanner Detects SQL injection flaws across inputs, parameters, and API endpoints.
- XSS Scanner Identifies reflected, stored, and DOM-based cross-site scripting vulnerabilities.
- Subdomain Finder Discovers all subdomains of a target domain.
- SSRF Scanner Detects server-side request forgery vulnerabilities.
- LFI / RFI Scanner Finds local and remote file inclusion flaws.
- Command Injection Scanner Finds OS command execution vulnerabilities.
- SSL/TLS Cipher Checker Analyzes supported ciphers and flags weak encryption protocols.
- WAF Detection Scanner Identifies which web application firewall protects a target.
- Technology Detection Maps the full tech stack CMS, frameworks, server software.
- PCI-DSS 6.4.3 Checker Validates payment page script integrity under PCI-DSS v4.0.