Dev tools · alternatives · 2026
24 alternatives to Payload Security Suite
An OOM-safe, lightweight WP Firewall & Malware Scanner
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
- 2
🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
2024 · github.com · its alternatives →
- 3
- 4
BruteBank▲89Block server and website attacks from your phone
2020 · brutebank.io · its alternatives →
- 5
Documentation of BunkerWeb, the open source and next generation WAF.
2025 · docs.bunkerweb.io · its alternatives →
- 6
SecuPress▲100Protect your WordPress website and your data every day
2016 · secupress.me · its alternatives →
- 7
Payload CMS▲176The best TypeScript CMS developer experience there is
2022 · payloadcms.com · its alternatives →
- 8BO
Hi HN, we’re the co-founders of Bearer, and today we launch an open-source alternative to code security solutions such as Snyk Code, SonarQube, or Checkmarx. Essentially, we help security & engineering teams to discover, filter and prioritize security risks and vulnerabilities in their codebase, with a unique approach through sensitive data (PII, PD, PHI). Our website is at https://www.bearer.com and our GitHub is here: https://github.com/bearer/bearer We are not originally Security experts but have been software developers and engineering leaders for over 15…
2023 · its alternatives →
- 9
Payload CMS▲143Developer-first TypeScript & React headless CMS
2021 · payloadcms.com · its alternatives →
- 10
This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…
2024 · github.com · its alternatives →
- 11
- 12
- 13
Automate app security with OSS vulnerability management
2020 · fossa.com · its alternatives →
- 14
An API security workbench for web and Android apps. A browser already routed through the proxy, an Android emulator that already trusts the certificate, and one merged API surface you can export. Free and open source.
22d ago · apiaxess.dev · its alternatives →
- 15
- 16
Hi Hacker News! Shahar and Tal from Keep here. We're thrilled to announce that we're open-sourcing our alerting CLI tool, Keep (https://github.com/keephq/keep). Designed by developers for developers, Keep streamlines and simplifies alerting, making it a first-class citizen within the development process. Think of Keep as Prometheus Alertmanager but for all observability tools, with a simple and intuitive (GitHub actions-like) syntax. We believe that alerting has historically been neglected in existing monitoring platforms, leading to subpar alerting practices. With Keep,…
2023 · github.com · its alternatives →
- 17VS
2014 · scanbeast.com · its alternatives →
- 18
FOSSA secures the software supply chain with automated SBOM generation, software composition analysis, license compliance, and vulnerability management.
2017 · fossa.io · its alternatives →
- 19
Fool attackers and protect your web services with BunkerWeb, the open-source and next-gen Web Application Firewall (WAF).
Jan 2026 · bunkerweb.io · its alternatives →
- 20SZ
We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated (https://news.ycombinator.com/item?id=9841243) helping commercial and open source software vendors securely distribute their apps to enterprise environments. During that time, we saw firsthand how hard it is for maintainers to fund their work, and how increasingly demanding enterprises have become when it comes to demonstrable…
2025 · securebuild.com · its alternatives →
- 21
vulntitan, vulnerability, malware, integrity, security
2025 · vulntitan.com · its alternatives →
- 22
All-in-one WordPress security: WAF, scanner, 2FA & more
Jul 2026 · wordsec.net · its alternatives →
- 23
- 24OS
tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of…
2023 · openapi.security · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →