Dev tools · alternatives · 2026
24 alternatives to Virus Total
Analyze suspicious files and URLs to detect types of viruses
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Virus Total launched in 2021; newer entries below may have overtaken it.
- 1
- 2
Search for Malicious Files and Urls easily from your browser
2025 · chromewebstore.google.com · its alternatives →
- 3
Report suspicious sites to Google
2019 · chromewebstore.google.com · its alternatives →
- 4
CyberWise▲101Detect phishing, adware and malware on websites
2023 · chromewebstore.google.com · its alternatives →
- 5
Virusdie▲100Clean and protect your websites like a security expert
2016 · virusdie.com · its alternatives →
- 6
2021 · github.com · its alternatives →
- 7
All your malware analysis tools in one place
2021 · analyze.intezer.com · its alternatives →
- 8
- 9
Link Shield▲14Detect phishing, malware, and suspicious links with an AI-powered URL scanning API.
2025 · linkshieldapi.com · its alternatives →
- 10
This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…
2024 · github.com · its alternatives →
- 11
Anomaly Detection on Dynamic (time-evolving) Graphs in Real-time and Streaming manner. Detecting intrusions (DoS and DDoS attacks), frauds, fake rating anomalies. - Stream-AD/MIDAS
2020 · github.com · its alternatives →
- 12
Broken link checker with malware and parked domain detection
2018 · drlinkcheck.com · its alternatives →
- 13
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
2025 · github.com · its alternatives →
- 14
Threatray▲58Giving you the power to defeat advanced malware threats
2022 · threatray.com · its alternatives →
- 15
Reddit Check▲126A tool to check if a URL is on Reddit and going viral
2016 · chromewebstore.google.com · its alternatives →
- 16
- 17
- 18
Did you know that VSCode extensions run with full access to your system—including file system, network, and credentials? Worse, dozens of malicious extensions have already made it into the marketplace, silently compromising devices. I am a security researcher and student developer who ran into this problem myself. To help tackle this, I built a 100% free tool (no login required) that scans VSCode (and Cursor/Windsurf) extensions for: - Hidden malware and obfuscated code - Dangerous permissions and API misuse - Vulnerable dependencies and suspicious network connections Users have already…
2025 · vscan.dev · its alternatives →
- 19
Hey HN, I built an automated system that tracks malicious Chrome/Edge extensions daily. The database updates automatically by monitoring chrome-stats for removed extensions and scanning security blogs. Currently tracking 1000+ known malicious extensions with extension IDs, names, and dates. I'm working on detection tools (GUI + CLI) to scan locally installed extensions against this database, but wanted to share the raw data first since maintained threat intelligence lists like this are hard to find. The automation runs 24/7 and pushes updates to GitHub. Free to use for research,…
Feb 2026 · github.com · its alternatives →
- 20
Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.
2020 · hostedscan.com · its alternatives →
- 21
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 22
Static analysis tool that detects potential ransomware in PE and ELF files through heuristic analysis - seekbytes/MicroSCOPE
2024 · github.com · its alternatives →
- 23
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
- 24
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →