Freedom251 › Business Operations
Free and open first
Best Vulnerability Scanner Software in 2026
Vulnerability scanner software helps identify security weaknesses across applications, code, networks, and other scan targets. This list is for people comparing free, freemium, paid, and self-hosted options.
- 29 apps
- Research read 28 Sept 2026
- How the order is worked out
- 1
Grype
Free plan Open source LinuxMacSelf-hosted+1Grype covers a broad range of scan targets and package ecosystems, with several output formats and vulnerability prioritization options.
- 2
OWASP ZAP
Free plan Open source APIExtensionLinux+3ZAP combines web scanning with automation, API imports, and CI options at no charge. Check installer requirements and the project's release-support limits before choosing it.
- 3
Intruder
Free plan APILinuxMac+2Intruder combines continuous scanning with prioritization and remediation guidance across several kinds of targets.
- 4
ManageEngine Vulnerability Manager Plus
Free plan APILinuxMac+3Vulnerability Manager Plus combines risk prioritization with patching, compliance policies, and remediation tracking.
- 5
Detectify Surface Monitoring
Free plan APIWebDetectify Surface Monitoring combines continuous asset discovery with broad vulnerability checks, configurable rules, and integrations.
- 6
Nuclei
Free plan LinuxMacSelf-hosted+1Nuclei offers a template-based approach to scanning across several target types, with custom checks and CI/CD integration.
- 7
OpenVAS
Free plan APILinuxMac+3OpenVAS covers a broad range of IT targets, with commercial deployment options that remain within a customer's environment. Its free edition has notable update, feature, and support limitations.
- 8
Trivy
Free plan LinuxMacSelf-hosted+1Trivy combines several scanner types with broad installation and integration options, and it can generate SBOMs.
- 9
Acunetix
Free trial APILinuxSelf-hosted+2Choose Acunetix if your organization needs dynamic scanning across web applications and APIs, with evidence to assess findings and integrations for issue tracking.
- 10
Burp Suite DAST
Free trial APILinuxSelf-hosted+2Burp Suite DAST covers web applications and APIs, with scan automation, access controls, and cloud or self-hosted deployment.
- 11
Astra Security
Free trial APIWebAstra Security combines automated scanning with human-led penetration testing and coverage for APIs and cloud infrastructure.
- 12
Kiuwan Code Security
Free trial APILinuxMac+3Kiuwan Code Security combines source scanning, customizable rules, quality gates and compliance reporting, with both cloud and on-premises analysis options.
- 13
Greenbone Community Edition
Free plan LinuxWeb - 14
Clair
Free plan Linux - 15
StackHawk HawkScan
Free trial APILinuxMac+3HawkScan combines dynamic scanning, coding-agent assistance, and broad CI/CD integrations for web and API security work. Review scan quotas, deployment needs, and plan pricing before selecting it.
- 16
Snyk Container
Free plan Web - 17
HCL AppScan Source
Paid LinuxSelf-hostedWindowsChoose HCL AppScan Source if your security or development team needs source-code SAST with IDE and CI/CD integration, custom language support, and on-premises control.
- 18
Invicti
Paid APISelf-hostedWebChoose Invicti if your team needs application and API security testing with risk prioritization, remediation context, and connections to development tools.
- 19
Mend.io
Paid WebMend.io covers application security, dependency maintenance, and AI component safeguards, with integrations for development and project tools.
- 20
Rapid7 InsightVM
Paid LinuxMacWeb+1InsightVM combines multiple assessment methods with advanced risk prioritization and remediation tracking. Consider the 500-asset pricing basis and listed plan terms when assessing fit.
- 21
Tenable Nessus
Paid LinuxMacWindowsNessus combines broad target coverage with authenticated, continuous, and compliance-focused scanning. Compare the two paid plans if web application and domain allowances matter.
- 22
Checkmarx One
Paid Web - 23
Rapid7 InsightAppSec
Paid WebWindowsInsightAppSec provides a broad listed scanning and reporting set in a hybrid deployment. Review the annual billing requirement and paid-only access against your testing workflow.
- 24
Qualys Vulnerability Management
Paid Web - 25
OpenText Fortify Software Security Platform
Paid WebChoose OpenText Fortify Software Security Platform when your security program needs IaC and container scanning alongside policy, remediation, SBOM, and compliance functions.
#1Places #1, #2, #3, #4, #5 on this list can be bought by the makers of the software on it. See the price
Compare scan targets, authenticated and continuous scanning, deployment type, asset limits, and report exports. Check whether a free plan or trial fits your needs, and review the licence when open-source code matters.
Questions
Which vulnerability scanners have free plans?
Clair, Greenbone Community Edition, and Grype list free plans. Intruder also lists a free plan; check the current terms before choosing.
Which platforms can these scanners run on?
Listed platforms include web, Linux, Windows, self-hosted, API, and macOS. Confirm the deployment option for the product you are considering.
Are authenticated and continuous scans available?
Authenticated scans and continuous scanning are comparison fields for this list. Check the product details to confirm which scan modes a tool supports.
How long are the listed free trials?
Astra Security lists 7 days. Detectify Surface Monitoring and Intruder list 14 days. Burp Suite DAST lists a trial without stating its duration.
What paid pricing is shown?
Kiuwan Code Security starts at $49 per user per month on annual billing. Astra Security lists $69 per month, while Detectify starts at €90 per month. Several products use pricing on request.