Dev tools · alternatives · 2026
24 alternatives to CVEScan
Free runtime CVE scanner with zero data stored
CVEScan is a free runtime vulnerability scanner that identifies known CVEs in installed software across macOS, Linux, and Windows. Users upload a plain-text inventory of installed packages, nmap XML files, or specify a… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
Document Scanner that protects your privacy. Contribute to ethereal-developers/OpenScan development by creating an account on GitHub.
2021 · github.com · its alternatives →
- 2
An open source security scanner for Visual Studio Code
2020 · snyk.io · its alternatives →
- 3EY
2019 · secalerts.co · its alternatives →
- 4
- 5
Did you know that VSCode extensions run with full access to your system—including file system, network, and credentials? Worse, dozens of malicious extensions have already made it into the marketplace, silently compromising devices. I am a security researcher and student developer who ran into this problem myself. To help tackle this, I built a 100% free tool (no login required) that scans VSCode (and Cursor/Windsurf) extensions for: - Hidden malware and obfuscated code - Dangerous permissions and API misuse - Vulnerable dependencies and suspicious network connections Users have already…
2025 · vscan.dev · its alternatives →
- 6
qsa.sh ▲107External security scan of your own IP, in your terminal
Jul 2026 · qsa.sh · its alternatives →
- 7
Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.
2020 · hostedscan.com · its alternatives →
- 8
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
2025 · github.com · its alternatives →
- 9
VulScan▲4Python security scanner that eliminates false positives
Feb 2026 · vulscan.nexorium.io · its alternatives →
- 10
VScanX▲11Deterministic security scanner with zero false positives
May 2026 · vscanx.vercel.app · its alternatives →
- 11
ScanReq▲4Find outdated deps and CVEs across 8 ecosystems in VS Code
Jun 2026 · scanreq.com · its alternatives →
- 12
Safescan▲73Anti money laundering and KYC analysis for a crypto address
2023 · cyberscope.io · its alternatives →
- 13
World's Largest Exploit Database
2023 · exploit.observer · its alternatives →
- 14SZ
We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated (https://news.ycombinator.com/item?id=9841243) helping commercial and open source software vendors securely distribute their apps to enterprise environments. During that time, we saw firsthand how hard it is for maintainers to fund their work, and how increasingly demanding enterprises have become when it comes to demonstrable…
2025 · securebuild.com · its alternatives →
- 15
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 16
Dastardly▲57A lightweight web app security scanner for your CI pipelines
2022 · portswigger.net · its alternatives →
- 17
Nessus for homelabs. Mac-native, $79 one-time.
May 2026 · noxen.app · its alternatives →
- 18
EPSS & VEDAS Score Aggregator for CVEs. Contribute to ARPSyndicate/cve-scores development by creating an account on GitHub.
2021 · github.com · its alternatives →
- 19SV
2017 · scannersec.com · its alternatives →
- 20
Downloads Information from NIST (CVSS), first.org (EPSS), and CISA (Exploited Vulnerabilities) and combines them into one list. Reports from vulnerability scanners like OpenVAS can be enriched with this information to prioritize remediation. The repository also contains a PowerBI template to show ho
2023 · github.com · its alternatives →
- 21
Hosted vuln scanning with client-ready reports
Jul 2026 · vulnscanners.com · its alternatives →
- 22
MCPScan▲2Discover & audit shadow Model Context Protocol servers
Aug 2026 · kuldeepster574.gumroad.com · its alternatives →
- 23
A web tool to scan websites for common vulnerabilities
2025 · webscan.dheerajjha.com · its alternatives →
- 24RA
2017 · beta.secureit.io · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →