Life & fun · alternatives · 2026
24 alternatives to Endgame – An AWS Pentesting tool to backdoor or expose AWS resources
Endgame is a pentesting tool designed for security professionals to test AWS infrastructure vulnerabilities. It simulates backdoor attacks and exposes potential weaknesses in AWS resources, allowing teams to identify… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 1 we have checked on their own sites, 1 of them free or with a free tier. Endgame – An AWS Pentesting tool to backdoor or expose AWS resources launched in 2021; newer entries below may have overtaken it.
- 1

Automated Penetration Testing for AI-Built Apps
2021 · replay.io · its alternatives →
- 2
Heyhack Scan▲271SaaS pen-testing that surpasses the level of ethical hackers
2022 · auth.heyhack.com · its alternatives →
- 3

- 4FT
Cloudbite is a low-barrier, free web app that helps you learn AWS skills with flashcards and spaced repetition.
2021 · cloudbite.attejuvonen.fi · its alternatives →
- 5

AI agents that find, validate, and fix every vulnerability
Jun 2026 · getastra.com · its alternatives →
- 6
Arcjetfree tier, from $25/mo▲430Secure the AI agents you're building at runtime
Sep 2026 · arcjet.com · its alternatives →
- 7

The AI-powered AppSec platform that identifies vulnerabilities with comprehensive penetration tests and provides actionable remediation insights.
2024 · beaglesecurity.com · its alternatives →
- 8

rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, and private resources. - goldfiglabs/rpCheckup
2021 · github.com · its alternatives →
- 9

- 10
BestDefense.io▲135Pentest and patch every deploy with AI
Jun 2026 · bestdefense.io · its alternatives →
- 11
Fabraix▲196We built Adversarial Cost to Exploit (ACE), a benchmark that measures the token expenditure an autonomous adversary must invest to breach an LLM agent. Instead of binary pass/fail, ACE quantifies adversarial effort in dollars, enabling game-theoretic analysis of when an attack is economically rational. We tested six budget-tier models (Gemini Flash-Lite, DeepSeek v3.2, Mistral Small 4, Grok 4.1 Fast, GPT-5.4 Nano, Claude Haiku 4.5) with identical agent configs and an autonomous red-teaming attacker. Haiku 4.5 was an order of magnitude harder to break than every other model; $10.21 mean…
May 2026 · fabraix.com · its alternatives →
- 12CG
Hey HN! I’m Gal, co-founder at Checksum (https://checksum.ai). Checksum is a tool for automatically generating and maintaining end-to-end tests using AI. I cut my teeth in applied ML in 2016 at a maritime tech company called TSG, based in Israel. When I was there, I worked on a cool product that used machine learning to detect suspicious vehicles. Radar data is pretty tough for humans to parse, but a great fit for AI – and it worked very well for detecting smugglers, terrorist activity, and that sort of thing. In 2021, after a few years working in big tech (Lyft, Google), I joined…
2023 · its alternatives →
- 13FL
Learn AWS security with the flAWS challenge
2018 · flaws.cloud · its alternatives →
- 14

Anthropic and OpenAI's publicly available models are explicitly guard-railed so that they refuse offensive tasks. And their cyber-focussed models are gated for enterprises. This leaves SMEs and mid market open to major vulnerabilities. AI can be used as both an adversarial and defensive tool in the world of cyber. A worst case outcome is if only the adversaries have access. Meanwhile, most existing AI cyber tools are just wrappers. The problem is that they still have all the guardrails on from the foundation model where they will inherit its refusals. For this project we've post-trained a…
Jun 2026 · argusred.com · its alternatives →
- 15ST
2024 · endpts.io · its alternatives →
- 16

- 17

rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, and private resources. - goldfiglabs/rpCheckup
2021 · github.com · its alternatives →
- 18

Pen test your "friend's" online MMORPG game - specific focus, sql injection opportunities - breakthenet/HackMe-SQL-Injection-Challenges
2016 · github.com · its alternatives →
- 19

A powerful automated security testing tool
2024 · geneau.gumroad.com · its alternatives →
- 20

Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️ - elC0mpa/aws-doctor
Jan 2026 · github.com · its alternatives →
- 21

Hi HN, Deadend is an agentic pentest CLI that automates vulnerability research in webapps. the problem we are trying to solve : removing the time consumed in repetitive assessments, report generation and extracting relevant information to let them focus on vulnerability research but powerful enough to find issues or leads by itself when we’re in a deadend. highlights : As of today, we scored 78% on XBOW’s benchmarks with claude-sonnet-4.5 in blackbox (we are currently iterating over the architecture of the agent and running the newest to get better results overall). The agent runs entirely…
Feb 2026 · github.com · its alternatives →
- 22

- 23

- 24

Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →