Dev tools · alternatives · 2026

24 alternatives to ThreatLens

Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs)

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

1. 1
   ThreatPinch Lookup▲65

   Add OSINT & Threat tooltips to all pages. Use any REST API!

   2017 · github.com · its alternatives →

2. 2EY
   Enter your URL and view CVEs affecting your stack over last 6 months▲144

   2019 · secalerts.co · its alternatives →

3. 3
   ThreatSlayer▲85

   Free enterprise grade security for your personal browser

   2023 · chromewebstore.google.com · its alternatives →

4. 4
   VoidAccess – open-source dark web OSINT, from query to a graph▲188

   Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and Flare. - KatrielMoses/voidaccess

   2d ago · github.com · its alternatives →

5. 5
   Ahtapot▲13

   IOC Analysis | Fast Threat Intel for Security Pros

   Oct 2025 · ahtapot.me · its alternatives →

6. 6
   Parqeye – A CLI tool to visualize and inspect Parquet files▲167

   I built a Rust-based CLI/terminal UI for inspecting Parquet files—data, metadata, and row-group-level structure—right from the terminal. If someone sent me a Parquet file, I used to open DuckDB or Polars just to see what was inside. Now I can do it with one command. Repo: https://github.com/kaushiksrini/parqeye

   Nov 2025 · github.com · its alternatives →

7. 7
   Osint tool that finds exposed files on domains▲58

   hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…

   Jul 2026 · search.cerast-intelligence.com · its alternatives →

8. 8
   Browser-based XSS scanner▲57

   This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…

   2024 · github.com · its alternatives →

9. 9
   A simple, highly commented, rootkit which attacks GCC and Python▲94

   2014 · github.com · its alternatives →

10. 10
    Another ELF Analysis Toolkit▲62

    Nyxelf simplifies static and dynamic analysis of ELF binaries, enabling you to extract valuable insights effortlessly. And can be used for vulnerability assessments, unpacking, syscall tracing, and memory analysis.

    2025 · github.com · its alternatives →

11. 11AM
    A minimal TS library that generates prompt injection attacks▲33

    I made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use. Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!

    2025 · prompt-injector.blueprintlab.io · its alternatives →

12. 12
    Cloud Threat intelligence ▲3

    High confidence IOC targeting public cloud infrastructure

    2023 · github.com · its alternatives →

13. 13
    Threatray▲58

    Giving you the power to defeat advanced malware threats

    2022 · threatray.com · its alternatives →

14. 14
    Monitor all exploits in wild easily for any CVE/EDB/GHSA or Technology▲17

    World's Largest Exploit Database

    2023 · exploit.observer · its alternatives →

15. 15
    SecurityLens▲6

    Domain Health and Security

    Oct 2025 · radar.defendflow.xyz · its alternatives →

16. 16
    Daily-updated database of malicious browser extensions▲17

    Hey HN, I built an automated system that tracks malicious Chrome/Edge extensions daily. The database updates automatically by monitoring chrome-stats for removed extensions and scanning security blogs. Currently tracking 1000+ known malicious extensions with extension IDs, names, and dates. I'm working on detection tools (GUI + CLI) to scan locally installed extensions against this database, but wanted to share the raw data first since maintained threat intelligence lists like this are hard to find. The automation runs 24/7 and pushes updates to GitHub. Free to use for research,…

    Feb 2026 · github.com · its alternatives →

17. 17
    ThreatRadar24▲2

    Free real-time cyber threat intelligence for security teams

    Feb 2026 · threatradar24.com · its alternatives →

18. 18
    BrowserTotal: A framework for analyzing browser security posture▲28

    Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…

    2025 · browsertotal.com · its alternatives →

19. 19
    Rust built open-sourced CLI tool for API specification validation▲23

    Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. - blst-security/cherrybomb

    2022 · github.com · its alternatives →

20. 20
    Subdomain Enumeration CLI▲11

    Discover and enumerate all subdomains associated with a website, including those not publicly advertised. Use this tool to conduct thorough security assessments, validate your organization's digital footprint, or enhance your reconnaissance capabilities for penetration testing and bug bounty hunting

    2024 · github.com · its alternatives →

21. 21
    AttackerView▲13

    Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t

    Feb 2026 · attackerview.com · its alternatives →

22. 22
    All CVE Exploits at one place▲10

    EPSS & VEDAS Score Aggregator for CVEs. Contribute to ARPSyndicate/cve-scores development by creating an account on GitHub.

    2021 · github.com · its alternatives →

23. 23
    An interactive CLI ArXiv explorer▲21

    CLI tool for exploring arXiv (inspired by karpathy's brilliant ArXiv Sanity Preserver) - knguyenanhoa/cli-arxiv

    2020 · github.com · its alternatives →

24. 24
    DevLens▲8

    The Autonomous Intelligence Layer for Pull Requests

    Apr 2026 · devlens.xyz · its alternatives →

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →