12,040 tools · Updated daily · Most free, no account
Free Security Tools
Latest added scans
SeverityScan nameAdded
CriticalNode.js Brotli Request-Body Integer Overflow (node2shell) - Remote Code Execution
20 days agoCriticalCVE-2026-109618 PHP2Shell ScannerCVE-2026-109618 Scanner - Remote Code Execution (RCE) vulnerability in PHP
24 days agoMediumSSL CrimeCheck your SSL/TLS configuration for Crime vulnerability. Compression methods you are using may put you into danger. Let's check your SSL for compression security.
1 month agoHighMITRE Caldera Default Login ScannerThis scanner detects the use of MITRE Caldera in digital assets. It identifies instances that still accept the default operator credentials shipped with the insecure default configuration. Detecting this exposure early helps prevent a full takeover of the adversary-emulation server.
1 month agoMediumManagement Panel Detection ScannerA Management Panel Detection Scanner is a tool or technique used to identify the management or administrative panels of web applications.
4 months agoNeed to run all checks at once?
Start Full Scan →- Free URL Fuzzer Online Discovers hidden endpoints, files, and directories via automated path fuzzing.
- SQL Injection Vulnerability Scanner Detects SQL injection flaws across inputs, parameters, and API endpoints.
- XSS Scanner Identifies reflected, stored, and DOM-based cross-site scripting vulnerabilities.
- Subdomain Finder Online Discovers the subdomains of a target domain and maps its attack surface.
- SSRF Vulnerability Scanner Detects server-side request forgery vulnerabilities.
- LFI / RFI Vulnerability Scanner Finds local and remote file inclusion flaws.
- Command Injection Scanner Finds OS command execution vulnerabilities.
- SSL/TLS Supported Cipher Checker Analyzes supported ciphers and flags weak encryption protocols.
- WAF Detection Scanner Identifies which web application firewall protects a target.
- Technology Detection Scanner Maps the full tech stack CMS, frameworks, server software.
- PCI-DSS 6.4.3 Compliance Checker Validates payment page script integrity under PCI-DSS v4.0.