nowfound

Dev tools · alternatives · 2026

24 alternatives to CyberReflex

Passive attack surface mapping with quantum-risk readiness

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1

    Your digital assets exposed to the internet create threats.

    2021 · swordeye.io · its alternatives →

  2. 2

    Attack Surface Management

    2021 · silentarmor.ai · its alternatives →

  3. 3
    Detectify▲124

    Application security testing reimagined

    2014 · detectify.com · its alternatives →

  4. 4
    CYREX▲62

    Web security vulnerability assessment & penetration testing

    2021 · cyrex.tech · its alternatives →

  5. 5

    This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…

    2024 · github.com · its alternatives →

  6. 6

    Know what the internet knows about you

    Jul 2026 · asmscan.com · its alternatives →

  7. 7

    Go Quantum-Safe Before Quantum Goes Live

    2025 · qu-secure.net · its alternatives →

  8. 8

    Stop guessing what to build. Map real pain, audit any gap

    Jul 2026 · weakpoint.ai · its alternatives →

  9. 9

    See your external attack surface the way adversaries do

    2025 · glasstrail.com · its alternatives →

  10. 10

    Protect your digital attack surface with Cytrusst ASM Tool

    2025 · cytrusst.com · its alternatives →

  11. 11

    AI agents now have impressive reasoning capabilities. This raises an important question: how dangerous are these AI agents at identifying & exploiting web vulnerabilities? We created CVE-bench to find out (I'm one contributor of 16). To our knowledge CVE-bench is the first benchmark using real-world web vulnerabilities to evaluate AI agents' cyberattack capabilities. We included 40 CVEs from NIST's database, focusing on critical-severity vulnerability (CVSS > 9.0). To properly evaluate agents’ attacks, we built isolated environments with containerization and identified 8 common attack…

    2025 · github.com · its alternatives →

  12. 12HA

    2019 · map.hashplane.com · its alternatives →

  13. 13

    We have been building a platform that analyzes quantum-vulnerable cryptography across four layers: Source code parses ASTs to find RSA, ECC, DH, and weak symmetric algorithms and generates fix suggestions pointing to NIST PQC replacements (ML-KEM, ML-DSA, SLH-DSA) Binaries disassembles PE, ELF, and Mach-O files to detect crypto patterns without source access Network endpoints probes TLS/SSH to identify deprecated cipher suites and whether the endpoint supports hybrid post-quantum key exchange Certificates checks signature algorithms and key parameters against post-quantum readiness…

    May 2026 · cerebion.com · its alternatives →

  14. 14

    I'm an ex-StarCraft II pro who retired back in 2014 and have been developing since then. I made a free web app security platform for vibe coders and small businesses/startups. WraithScan (https://wraithscan.com) has a double meaning... as you can guess cloaked wraiths + comsat scanning but also is a web scanner for detecting attack vectors for your web app. Cloaked wraiths are seen as cheesy these days, right? Anyways, it tests for the following vulnerabilities: - SQL injection - XSS - Open redirects - Exposed .env / backup files - Misconfigured CORS - Misconfigured…

    2025 · wraithscan.com · its alternatives →

  15. 15

    cybersecurity, attack surface management, digital footprint

    2024 · redzone.ae · its alternatives →

  16. 16

    Enterprise cryptographic visibility and posture management

    Jan 2026 · qinsight.com · its alternatives →

  17. 17

    We built FullHunt Agentic AI, an autonomous tool that maps an organization’s internet-facing assets and possible attack paths in seconds. It automatically discovers exposed assets, correlates CVEs (EPSS, CISA KEV, FullHunt data), and produces a prioritized action plan. Try a prompt like: "Discover the attack surface of acme.com and identify possible attack paths."

    2021 · fullhunt.io · its alternatives →

  18. 18

    Find what your DDoS protection misses

    Apr 2026 · ddactic.net · its alternatives →

  19. 19

    M365 compliance posture in 15 minutes, not five figures

    Jun 2026 · postureiq.arimaitech.com · its alternatives →

  20. 20

    Detect and protect against satellite cyber threats

    2025 · its alternatives →

  21. 21

    Real-time crypto & stock signals for AI agents —x402 powered

    Feb 2026 · hedgealphaoracle-production.up.railway.app · its alternatives →

  22. 22

    Automated Attack Surface Management & AI Threat Intelligence

    Sep 2026 · app.btpsec.com · its alternatives →

  23. 23

    Find Out Whats Exploitable. In Hours, Not Weeks.

    Jul 2026 · neurapent.com · its alternatives →

  24. 24

    For at least a few years (since before COVID), in my circle everbody wants an AI tool that finds vulnerabilities in binaries. I have my reservations about such a tool because of my perception that AI is overhyped, so I decided to build one myself to see how useful it could be (or not). I was actually kinda surprised how well it worked for my collection of binaries with known CVEs. It definitely has false positives and negatives, as any static analysis tool would, but I think its actually somewhat usable. I dont think the results are super actionable, but interesting nonetheless. I still…

    2025 · pwnscan.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →