Dev tools · alternatives · 2026
24 alternatives to OWASP Penetration Testing Kit
application security, owasp top 10, browser extension
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. OWASP Penetration Testing Kit launched in 2023; newer entries below may have overtaken it.
- 1
Ensure web inclusivity & compliance with just a few clicks.
2025 · testmuai.com · its alternatives →
- 2
Cross browser testing by taking full-page screenshots
2018 · testmuai.com · its alternatives →
- 3
Heyhack Scan▲271SaaS pen-testing that surpasses the level of ethical hackers
2022 · auth.heyhack.com · its alternatives →
- 4
Beautiful, cross-platform & open-source tools for debugging, testing and building with HTTP(S), on Windows, Linux & Mac.
2019 · httptoolkit.tech · its alternatives →
- 5
This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…
2024 · github.com · its alternatives →
- 6
LambdaTest▲127Ensure your web-apps work seamlessly across all browsers.
2018 · testmuai.com · its alternatives →
- 7
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
2025 · github.com · its alternatives →
- 8
Dastardly▲57A lightweight web app security scanner for your CI pipelines
2022 · portswigger.net · its alternatives →
- 9
SOOS▲68Developer security, license, compliance and testing platform
2021 · soos.io · its alternatives →
- 10
Your playground for writing custom API security tests
2023 · akto.io · its alternatives →
- 11
Because your first users shouldn’t be hackers.
Nov 2025 · fiverr.com · its alternatives →
- 12
Zylitics▲77Zero config browser based testing platform for web apps
2021 · app.outomated.com · its alternatives →
- 13
Scan any website for security flaws in one click
Nov 2025 · chromewebstore.google.com · its alternatives →
- 14
MCPJam Inspector▲141Hi HN, I'm Matt, founder of MCPJam. We're building open source dev tools for MCP server builders. There’s been a lot of debate around skills vs MCP. From what I see, there’s a growing trend of people using skills paired with MCP servers. Skills teach the agent how to use the MCP server tools and guide the agent to completing complex workflows. We’re also seeing Anthropic encourage the use of Skills + MCP in their products. Anthropic recently launched the connectors marketplace. A good example of this is the Figma connector + skills. The Figma skill teaches the agent how to use the Figma MCP…
Jan 2026 · mcpjam.com · its alternatives →
- 15
CYBER AI▲93Drowning in security reports? Dive into insights with Cyber
2024 · cyber.deployh.ai · its alternatives →
- 16
VibeScan▲9Beta tool that runs OWASP/Nuclei/ZAP checks fast and prioritizes fixes; would love test runs on your staging domains and blunt feedback.
2025 · vibescan.co.kr · its alternatives →
- 17
- 18
Probely▲87Intuitive and easy-to-use webapp vulnerability scanner
2018 · probely.com · its alternatives →
- 19
- 20
10-point OWASP web security checklist in 1 click
Aug 2026 · github.com · its alternatives →
- 21
Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…
2025 · browsertotal.com · its alternatives →
- 22
Pentest List▲61Discover the best penetration testing tools, security resources, and ethical hacking content. Community-driven platform for cybersecurity professionals.
2024 · pentestlist.com · its alternatives →
- 23
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 24
Defend What Matters : Web Application Penetration Testing
2025 · qualysec.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →