Compare

Side-by-side comparison

Pick up to four tools and compare adoption, momentum and maintenance at a glance. The crown marks the leader in each row.

The recursive internet scanner for hackers.

Free open-source web app scanner and intercepting proxy (formerly OWASP ZAP), now backed by Checkmarx.

Fast template-based vulnerability scanner with thousands of community YAML templates for CVEs and misconfigs.

Classic network discovery and port scanner with a scripting engine for service and vulnerability detection.

Head to head

Metric	bbot	ZAP	Nuclei	Nmap
Stars	11.1k	16.1k	32.5k	13.9k
Weekly downloads	10.2k	n/a	n/a	n/a
Download growth	-3%	n/a	n/a	n/a
Popularity score	60/100	77/100	82/100	76/100
Forks	989	2.7k	4k	3k
Open issues	38	875	87	724
Last commit	1d ago	1w ago	1w ago	1w ago
Latest version	3.0.2Aug 24, 2026	n/a	n/a	n/a
License	AGPL-3.0	Apache-2.0	MIT	n/a
First released	2022	2015	2020	2012
Signals	None	Popular	Popular	Popular
Listed in	Security & Identity › Pentesting & DAST	Security & Identity › Pentesting & DAST	Security & Identity › Pentesting & DAST	Security & Identity › Pentesting & DAST

Hover for exact values; switch to log scale for tools of very different sizes. Not shown (no comparable download data): ZAP, Nuclei, Nmap.

The recursive internet scanner for hackers.

Free open-source web app scanner and intercepting proxy (formerly OWASP ZAP), now backed by Checkmarx.

Fast template-based vulnerability scanner with thousands of community YAML templates for CVEs and misconfigs.

Classic network discovery and port scanner with a scripting engine for service and vulnerability detection.

Metric	bbot	ZAP	Nuclei	Nmap
Stars	11.1k	16.1k	32.5k	13.9k
Weekly downloads	10.2k	n/a	n/a	n/a
Download growth	-3%	n/a	n/a	n/a
Popularity score	60/100	77/100	82/100	76/100
Forks	989	2.7k	4k	3k
Open issues	38	875	87	724
Last commit	1d ago	1w ago	1w ago	1w ago
Latest version	3.0.2Aug 24, 2026	n/a	n/a	n/a
License	AGPL-3.0	Apache-2.0	MIT	n/a
First released	2022	2015	2020	2012
Signals	None	Popular	Popular	Popular
Listed in	Security & Identity › Pentesting & DAST	Security & Identity › Pentesting & DAST	Security & Identity › Pentesting & DAST	Security & Identity › Pentesting & DAST

Hover for exact values; switch to log scale for tools of very different sizes. Not shown (no comparable download data): ZAP, Nuclei, Nmap.