Life & fun · alternatives · 2026
24 alternatives to Scanning the Web for Security.txt Files
This is a tool for scanning websites to find and analyze security.txt files, which are standardized files that contain security contact information and vulnerability disclosure policies. It is designed for security… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Scanning the Web for Security.txt Files launched in 2021; newer entries below may have overtaken it.
- 1
Yes, it's open source: https://github.com/lissy93/web-check :) Why I'm building this? There are a lot of tools out there for discovering meta and security data relating to a website, IP or server. But currently, there isn't anything that does everything, all in one place and without a paywall/ user sign up. It's still a WIP, and I'm working on a new version, with some more comprehensive checks, so any feedback would be much appreciated :)
2024 · v1.web-check.xyz · its alternatives →
- 2
A web tool to scan websites for common vulnerabilities
2025 · webscan.dheerajjha.com · its alternatives →
- 3
Search for Malicious Files and Urls easily from your browser
2025 · chromewebstore.google.com · its alternatives →
- 4
- 5CF
2012 · webscanservice.com · its alternatives →
- 6
- 7
Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.
2020 · hostedscan.com · its alternatives →
- 8
This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…
2024 · github.com · its alternatives →
- 9EY
2019 · secalerts.co · its alternatives →
- 10
- 11
Pentest List▲61Discover the best penetration testing tools, security resources, and ethical hacking content. Community-driven platform for cybersecurity professionals.
2024 · pentestlist.com · its alternatives →
- 12
ezcrypt - An easy to use tool for strong file encryption.
2024 · codeberg.org · its alternatives →
- 13
- 14
Automatic scan for unintentionally exposed sensitive files.
2022 · its alternatives →
- 15
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 16
See the potential security risk for every site you visit
2022 · securityscorecard.com · its alternatives →
- 17AG
29d ago · cms-sfx-demo.apeleg.com · its alternatives →
- 18
Free way to identify SSL configuration issues
2019 · magenticians.com · its alternatives →
- 19
Contribute to ollipal/classified.html development by creating an account on GitHub.
2021 · github.com · its alternatives →
- 20
CYREX▲62Web security vulnerability assessment & penetration testing
2021 · cyrex.tech · its alternatives →
- 21
Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…
2025 · browsertotal.com · its alternatives →
- 22
I often need simple text tools (e.g. diffing, epoch time conversion, number base conversion) and was frustrated that I couldn't find a simple option that was as fast as I wanted. Many (SEO-optimized) websites exist, but they unnecessarily send your input to their servers. I used tools like DevToys but their diff has been broken on Mac for a while [1] and it requires installing an app, and CyberChef is good but requires too many interactions (yes, I'm picky). So, I decided to build my own. txtl tries to autodetect what mode you want based on the input, and in general is fast and gets out of…
2025 · viveksjain.github.io · its alternatives →
- 23
Dastardly▲57A lightweight web app security scanner for your CI pipelines
2022 · portswigger.net · its alternatives →
- 24
pentestnet▲12Website Vulnerability Scanning Suite - Automated Pentest
2025 · pentestnet.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →