Side-by-side comparison

Free open-source web app scanner and intercepting proxy (formerly OWASP ZAP), now backed by Checkmarx.

Fast template-based vulnerability scanner with thousands of community YAML templates for CVEs and misconfigs.

Classic network discovery and port scanner with a scripting engine for service and vulnerability detection.

Rapid7's exploitation framework with thousands of modules for exploits, payloads and post-exploitation.