Work · alternatives · 2026
24 alternatives to Tblue – 614 passive security scanners for any website, runs locally
Passive blue-team security scanner — 582 read-only modules, plus 32 opt-in probes. Runs on your machine. No accounts. No telemetry. - taylannuhogluofficial-png/Tblue
Tblue is a security scanner that performs passive analysis of websites using 582 read-only modules and 32 optional probes. It runs locally on the user's machine without requiring accounts or sending telemetry data. The… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
I kept slamming into Claude Code limits mid-session and couldn’t find a quick way to see how close I was getting, so I hacked together a tiny local tracker. Streams your prompt + completion usage in real time Predicts whether you’ll hit the cap before the session ends Runs 100 % locally (no auth, no server) Presets for Pro, Max × 5, Max × 20 — tweak a JSON if your plan’s different GitHub: https://github.com/Maciek-roboblog/Claude-Code-Usage-Monitor It’s already spared me a few “why did my run just stop?” moments, but it’s still rough around the edges. Feedback, bug…
2025 · github.com · its alternatives →
- 2
Heyhack Scan▲271SaaS pen-testing that surpasses the level of ethical hackers
2022 · auth.heyhack.com · its alternatives →
- 3
Secure code in less than 5 minutes for free
2022 · contrastsecurity.com · its alternatives →
- 4
Dastardly▲57A lightweight web app security scanner for your CI pipelines
2022 · portswigger.net · its alternatives →
- 5
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
2025 · github.com · its alternatives →
- 6
Claudoscope▲106Browse, search & track costs across Claude Code sessions
Apr 2026 · claudoscope.com · its alternatives →
- 7
- 8
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
- 9
AI all-in-one security scanner for Web, API, and OSINT.
Jul 2026 · github.com · its alternatives →
- 10
Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.
2020 · hostedscan.com · its alternatives →
- 11
- 12
Check if your data has been compromised on the dark web.
2025 · its alternatives →
- 13
Nullgaze▲3Scan any website for leaked secrets in seconds
Feb 2026 · nullgaze-ohm8.vercel.app · its alternatives →
- 14
- 15
Democratising Cybersecurity
2025 · thefirewall.org · its alternatives →
- 16
GitHub▲2All-in-one security scanning toolkit for penetration testers
Dec 2025 · github.com · its alternatives →
- 17
- 18WS
http://webscanner.tk/quickscan/ Hi! I made this project over the couse of a week to help teach myself more about Django and web app development. I am studying computer security in school and web security is one of my passions. It is a tool that helps web developers ensure that they have implemented helpful security mechanisms like HTTPOnly flags, X-Frame-Options, etc. There are hundreds of tools that offer to scan websites for things like cross-site scripting, mySQL injection, etc. This tool simply looks for information that is available via one or two GET requests (the headers, protocols,…
2013 · webscanner.tk · its alternatives →
- 19
Free website security scanner 20+ checks, instant PDF report
May 2026 · pulseshield.co.uk · its alternatives →
- 20
SecureSpells▲16Find GDPR risks on your live site before regulators do
Feb 2026 · securespells.com · its alternatives →
- 21
- 22
Detect and mitigate DDoS attacks in under 1 second. Flowtriq monitors every packet, classifies attacks, deploys BGP FlowSpec & RTBH rules, triggers cloud scrubbing, and alerts your team instantly. 14-day free trial. From $7.99/node/mo or $19/flow source.
Apr 2026 · flowtriq.com · its alternatives →
- 23
Free security scan that tells you exactly how to fix it
Jun 2026 · its alternatives →
- 24
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →