Dev tools · alternatives · 2026
24 alternatives to Waloscan
cybersecurity platform for external attack auditing
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1

- 2

🦭 Distributed log streaming engine built from first principles - nubskr/walrus
Dec 2025 · github.com · its alternatives →
- 3
OpenStatus▲434Hey HN! We’re Max and Thibault building OpenStatus.dev an OpenSource synthetic monitoring platform with incident managements 1 min demo: https://twitter.com/mxkaske/status/1685666982786404352 We have just reached 2000 stars on GitHub https://github.com/openstatusHQ/openstatus We are really excited to hear your feedback/questions and connect further: our emails are [email protected] and [email protected]. Thank you!
2025 · openstatus.dev · its alternatives →
- 4Mongotron▲114
Open source cross platform MongoDB management
2015 · cienciaespiritual.com · its alternatives →
- 5

- 6

A security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best practice violations. - Adversis/tailsnitch
Jan 2026 · github.com · its alternatives →
- 7
CodeScan▲70DevOps quality and security for the Saleforce platform
2020 · autorabit.com · its alternatives →
- 8

- 9

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS - matanolabs/matano
2022 · github.com · its alternatives →
- 10

- 11EY
2019 · secalerts.co · its alternatives →
- 12

Phishcan provides crucial threat intelligence, and it currently tracks phishing domains for: • Scotiabank, Desjardins, RBC, Interac… • Telecom providers, provincial power and health services... • Federal & provincial services, CRA, Canada Post, Service Canada, Revenue Québec... How Phishcan works: • Parsing millions of domains: Continuously scanning and analyzing vast numbers of domains to detect suspicious patterns and potential phishing sites. • Monitoring threat actors : close watch on cyber‑criminal infrastructures and their new domain registrations. • Data enrichment : adding contextual…
2025 · phishcan.com · its alternatives →
- 13

2014 · github.com · its alternatives →
- 14

This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…
2024 · github.com · its alternatives →
- 15

2024 · github.com · its alternatives →
- 16

- 17

Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…
2025 · browsertotal.com · its alternatives →
- 18
CodeScan▲16Scan and secure your code to prevent future cyber threats.
2025 · codescan.dev · its alternatives →
- 19

- 20

Did you know that VSCode extensions run with full access to your system—including file system, network, and credentials? Worse, dozens of malicious extensions have already made it into the marketplace, silently compromising devices. I am a security researcher and student developer who ran into this problem myself. To help tackle this, I built a 100% free tool (no login required) that scans VSCode (and Cursor/Windsurf) extensions for: - Hidden malware and obfuscated code - Dangerous permissions and API misuse - Vulnerable dependencies and suspicious network connections Users have already…
2025 · vscan.dev · its alternatives →
- 21

This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…
2025 · github.com · its alternatives →
- 22

An open source cybersecurity protocol for syncing decentralized graph data. - amark/gun
2014 · github.com · its alternatives →
- 23
Metaguard▲13Anti Phishing tool for all your Crypto Transactions
2021 · metaguard.app · its alternatives →
- 24

In-browser A.I. protection from online threats - all free
Nov 2025 · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →