Dev tools · alternatives · 2026
24 alternatives to Lonkero
Wraps around your attack surface
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
- 2
A versatile web framework and library for building client-side and server-side web applications - ivanceras/sauron
2019 · github.com · its alternatives →
- 3BA
2014 · breach.cc · its alternatives →
- 4
Chrome Devtools Protocol rust API. Contribute to mattsse/chromiumoxide development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 5
Probely▲87Intuitive and easy-to-use webapp vulnerability scanner
2018 · probely.com · its alternatives →
- 6
FeOx (Iron-Oxide) is an ultra-fast, embedded and persisted KV store in pure Rust. - mehrantsi/feoxdb
2025 · github.com · its alternatives →
- 7
Contribute to fmeringdal/covert development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 8
- 9
Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…
2025 · browsertotal.com · its alternatives →
- 10
- 11
An experimental Rust-native build tool for React apps. - lovablelabs/oj
Sep 2026 · github.com · its alternatives →
- 12
AttackerView▲13Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t
Feb 2026 · attackerview.com · its alternatives →
- 13
🏞 Steganography-based image integrity - Merkle tree nodes embedded into image chunks so that each chunk's integrity can be verified on its own. - dennis-tra/image-stego
2020 · github.com · its alternatives →
- 14
Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.
2020 · hostedscan.com · its alternatives →
- 15
- 16
A Smart and AI driven Web Vulnerability Scanner
2025 · thesmartscanner.com · its alternatives →
- 17
Remote Code Oxidation is a collection of tools that help offensive security professionals quickly adapt payloads to the needs of their engagement. Any and all feedback is welcome!
2022 · github.com · its alternatives →
- 18TS
Hi HN, I’m Guillaume, the cofounder of Bearer, an Open Source SAST solution. After launching a few weeks ago here on Hacker News with support for Ruby and JavaScript stacks, I’m happy to report we’ve just released a new version (v1.2) with TypeScript support! In terms of code coverage, we use the same rules already implemented for vanilla JavaScript, but as usual, you can build your own. The rules list is here: https://docs.bearer.com/reference/rules/ It’s a first version for TS, but we believe that thanks to the pre-existing JavaScript support it should already…
2023 · its alternatives →
- 19
- 20
We're open-sourcing Sighthound today, our rules-based static security scanner. What makes it special is that it's coded in rust and uses tree-sitter as it's AST making it very fast and easily extensible. Why build another scanner in 2026? We wanted to improve some of our detection outcomes but noticed the current open source scanners like Semgrep/Opengrep we're capped by a bunch of adoption limitations such as being written in OCaml, requiring a lot of work to add a language parser, and the rulesets were licensed differently and required paid offerings. It also felt that licensing was…
Jul 2026 · github.com · its alternatives →
- 21BG
We originally set out to solve complex debugging headaches and useless alerts caused by traditional security scanners in our own projects. Static Analysis (SAST) flagged too much noise because it couldn't verify runtime context, while Dynamic Analysis (DAST) missed internal logic bugs because it treated the app like a black box. We built a CLI tool to bridge this gap using grey box testing from a red team approach. We use internal knowledge of the codebase to guide parallel execution, allowing us to find complex or hidden logic errors and attack paths standard linters/scanners miss. The…
Dec 2025 · bloodhoundsecurity.ca · its alternatives →
- 22
Phynd▲9Affordable, automated vulnerability scanning—no blind spots
2025 · phynd.io · its alternatives →
- 23
Nullgaze▲3Scan any website for leaked secrets in seconds
Feb 2026 · nullgaze-ohm8.vercel.app · its alternatives →
- 24
VibeScan▲9Beta tool that runs OWASP/Nuclei/ZAP checks fast and prioritizes fixes; would love test runs on your staging domains and blunt feedback.
2025 · vibescan.co.kr · its alternatives →
Also compare
- RustScan alternatives
- Sauron – A web framework in Rust that adheres to the Elm architecture alternatives
- Breach – A modular browser built on Chromium and Node.js alternatives
- Chromiumoxid – An Async Headless Chrome API in Rust alternatives
- Probely alternatives
- FeOx – Fast embedded KV store in Rust alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →