Dev tools · alternatives · 2026

24 alternatives to All CVE Exploits at one place

EPSS & VEDAS Score Aggregator for CVEs. Contribute to ARPSyndicate/cve-scores development by creating an account on GitHub.

All CVE Exploits at one place is a repository that aggregates Common Vulnerabilities and Exposures (CVE) exploits in a single location. It serves security researchers, developers, and IT professionals who need to… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. All CVE Exploits at one place launched in 2021; newer entries below may have overtaken it.

1. 1
   Opengrep▲340

   The open source code security engine

   2025 · opengrep.dev · its alternatives →

2. 2
   Monitor all exploits in wild easily for any CVE/EDB/GHSA or Technology▲17

   World's Largest Exploit Database

   2023 · exploit.observer · its alternatives →

3. 3
   CVEDatabase▲1

   Search-Analyze-Remediate CVE's with ease

   Jan 2026 · cvedatabase.com · its alternatives →

4. 4EY
   Enter your URL and view CVEs affecting your stack over last 6 months▲144

   2019 · secalerts.co · its alternatives →

5. 5
   VulnCost for Visual Studio Code▲126

   An open source security scanner for Visual Studio Code

   2020 · snyk.io · its alternatives →

6. 6
   CVE Vulnerability Info Downloader – Including Dashboard for OpenVAS▲5

   Downloads Information from NIST (CVSS), first.org (EPSS), and CISA (Exploited Vulnerabilities) and combines them into one list. Reports from vulnerability scanners like OpenVAS can be enriched with this information to prioritize remediation. The repository also contains a PowerBI template to show ho

   2023 · github.com · its alternatives →

7. 7
   VulnXplorer▲1

   Map your stack. See every vulnerability. Fix what matters.

   Mar 2026 · vulnxplorer.com · its alternatives →

8. 8
   AttackerView▲13

   Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t

   Feb 2026 · attackerview.com · its alternatives →

9. 9
   Real-time security risks detection for any website or server▲22

   Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.

   2020 · hostedscan.com · its alternatives →

10. 10
    CVE-Bench, the first LLM benchmark using real-world web vulnerabilities▲6

    AI agents now have impressive reasoning capabilities. This raises an important question: how dangerous are these AI agents at identifying & exploiting web vulnerabilities? We created CVE-bench to find out (I'm one contributor of 16). To our knowledge CVE-bench is the first benchmark using real-world web vulnerabilities to evaluate AI agents' cyberattack capabilities. We included 40 CVEs from NIST's database, focusing on critical-severity vulnerability (CVSS > 9.0). To properly evaluate agents’ attacks, we built isolated environments with containerization and identified 8 common attack…

    2025 · github.com · its alternatives →

11. 11
    Browser-based XSS scanner▲57

    This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…

    2024 · github.com · its alternatives →

12. 12
    CVE Playground▲3

    Practice real CVEs. Think like an attacker.

    May 2026 · cveplayground.com · its alternatives →

13. 13SZ
    SecureBuild – Zero-CVE Images That Pay OSS Projects▲40

    We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated (https://news.ycombinator.com/item?id=9841243) helping commercial and open source software vendors securely distribute their apps to enterprise environments. During that time, we saw firsthand how hard it is for maintainers to fund their work, and how increasingly demanding enterprises have become when it comes to demonstrable…

    2025 · securebuild.com · its alternatives →

14. 14
    PwnScan▲8

    For at least a few years (since before COVID), in my circle everbody wants an AI tool that finds vulnerabilities in binaries. I have my reservations about such a tool because of my perception that AI is overhyped, so I decided to build one myself to see how useful it could be (or not). I was actually kinda surprised how well it worked for my collection of binaries with known CVEs. It definitely has false positives and negatives, as any static analysis tool would, but I think its actually somewhat usable. I dont think the results are super actionable, but interesting nonetheless. I still…

    2025 · pwnscan.com · its alternatives →

15. 15
    CVE Stack Monitor▲2

    Weekly CVE digest for exactly your stack — no noise.

    Jun 2026 · its alternatives →

16. 16
    Qualysec Vulnerability Dashboard▲6

    Vulnerability dashboard

    2025 · dashboard.qualysec.com · its alternatives →

17. 17RA
    Receive Alerts when your Server's software has Security Vulnerabilities▲16

    2017 · beta.secureit.io · its alternatives →

18. 18
    VulnTracker▲3

    Track your products. We’ll watch the vulnerabilities.

    Dec 2025 · vulntracker.io · its alternatives →

19. 19
    Vulners: complete security database▲6

    security, vulnerability, exploit, CVE, intelligence, linux

    2018 · vulners.com · its alternatives →

20. 20
    I built a PR listener and ruleset to detect malicious code in CI/CD▲13

    I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…

    2025 · github.com · its alternatives →

21. 21
    Precursor Intelligence▲3

    Triage CVEs by what attackers are actually exploiting

    Jun 2026 · precursorintelligence.com · its alternatives →

22. 22
    Vigilix▲3

    Pentest findings management built for security teams in Asia

    Jun 2026 · vigilix.id · its alternatives →

23. 23
    AISMOND▲4

    We built AISMOND for MSP teams that need one place to track external exposure across many client environments. Live today: - Multi-tenant dashboard for risky IPs, services, and countries - IP-level context from CVEs, IoC signals, abuse reports, and open ports - One-command onboarding scripts (Windows, Linux, macOS) - Weekly digest generation and resend - On-demand port scanning on eligible plans Not shipped yet: - PSA ticketing - RMM integration Would love feedback on two things: 1) Are the risk scores understandable enough to prioritize action? 2) Which PSA workflow should we ship first?

    Feb 2026 · aismond.com · its alternatives →

24. 24
    ThreatLens▲4

    Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs)

    Jul 2026 · github.com · its alternatives →

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →