SOFTWARE TYPE
Explore AI tools and software platforms related to Vulnerability Management. Compare options by business fit, pricing, features, and use cases.
Explore 49 Vulnerability Management tools for business workflows. Compare software by use case, features, pricing model, integrations, and practical fit.
FireCompass is an AI-powered security platform for automated penetration testing, continuous red teaming, and attack surface management.
Enterprise security teams, Mid-market companies, Security Operations (SecOps) managers, Organizations with dynamic attack surfaces
Dradis Pro is a self-hosted penetration testing management platform that helps security teams automate reporting and centralize findings.
Security consultancies, Corporate security teams, Enterprise security departments, Freelance penetration testers
Centraleyezer is a vulnerability management platform that provides a centralized dashboard and reports to track security risks across IT infrastructure.
Mid-market companies, Enterprise organizations, Managed Security Service Providers (MSSPs), Government and public institutions
Brinqa is an AI-driven exposure management platform that unifies cyber risk data from security and IT systems into a single view.
Enterprise companies, CISOs and security risk leaders, Vulnerability management teams, IT and Cloud security teams
Asimily Insight provides automated device inventory and vulnerability prioritization for IT, IoT, OT, and IoMT devices.
Healthcare organizations, Manufacturing plants, Government agencies, Hospitality groups
Apiiro is an application security platform that provides unified risk management and code-to-runtime context for security teams.
Enterprise security teams, Application security engineers, Software development organizations, Organizations with complex CI/CD pipelines
Outpost24 Outscan is a cloud-based cybersecurity platform designed for external attack surface management and risk-based vulnerability monitoring.
Mid-market companies, Enterprise companies, Security operations teams, Compliance officers
Cyber Chief is a Cloud Native Application Protection Platform (CNAPP) providing automated vulnerability scanning and API security for software teams.
High-growth SaaS companies, Mid-market software teams, Enterprise software developers, Scale-ups without large internal security teams
Black Duck Polaris is a cloud-native application security platform that unifies SAST, DAST, and SCA to identify vulnerabilities in software and APIs.
Software companies, Enterprise companies, Organizations in regulated industries, Development and security teams
SecVibe is a security platform that provides specialized controls and real time analysis for applications built with AI coding assistants.
Software companies, Development teams using AI coding assistants, Teams with existing SAST/SCA/DAST workflows
HackerOne is a crowdsourced security platform that connects organizations with ethical hackers to find and fix security, privacy, and AI vulnerabilities.
Enterprise Companies, Mid-Market Companies, Financial Services organizations, Healthcare providers
Glasstrail scans an organization's external digital footprint, including domains, email, and credentials, to identify security gaps without requiring agent software.
Small and medium-sized businesses, Cybersecurity consultants, Managed Service Providers, Insurance providers
Giskard is an AI security testing platform that uses dynamic red teaming to detect vulnerabilities, hallucinations, and prompt injections in LLM agents.
Software companies, Enterprise AI teams, Product managers, Domain experts overseeing AI safety
Strobes is an exposure management platform that uses AI agents to discover, validate, and help remediate security vulnerabilities.
Mid-market companies, Enterprise security teams, SecOps managers, DevSecOps engineers
Red Sentry provides human-led penetration testing and a PTaaS platform to identify security vulnerabilities across networks, apps, and cloud environments.
Software companies, Mid-market companies, Enterprises, Companies seeking SOC 2 or ISO 27001 compliance
FortifyData is a cyber risk management platform providing AI-driven prioritization, attack surface monitoring, and compliance automation.
Cybersecurity teams, Compliance managers, Higher education institutions, Enterprise security leads
Eclypsium is a supply chain security platform that scans hardware, firmware, and software components in IT infrastructure to detect vulnerabilities.
Enterprise companies, Government agencies, Financial services organizations, Telecommunications providers
Aikido provides a unified security platform that combines vulnerability scanning and runtime protection for code, cloud, and runtime environments.
Software companies, Development teams, FinTech startups, HealthTech companies
Fluid Attacks is a cybersecurity testing platform that combines AI and human pentesters to help find and fix vulnerabilities in software.
Software development teams, Security teams, DevSecOps professionals, Organizations in banking, healthcare, and transportation
AttackForge is an offensive security management platform used to manage testing projects, identify vulnerabilities, and generate on-demand reports.
Individual security testers, Security consultancies, Small to medium security teams, Enterprise security departments
Holm Security VMP is a vulnerability management platform that combines attack surface monitoring with security scanning across cloud, network, and API assets.
Small and medium-sized businesses, Organizations with hybrid cloud and on-premise environments, Companies needing to meet EU regulatory compliance, IT managers overseeing OT and IoT infrastructure
Appknox is a mobile application security platform that provides automated vulnerability assessments and security testing for iOS and Android apps.
Software companies, Enterprise security teams, DevSecOps managers, Mobile app developers
Heeler is an application security remediation platform that combines SCA, SAST, and secrets detection with AI-driven vulnerability fixes.
Software Companies, DevSecOps Teams, Application Security Engineers, Cloud-First Organizations
Socket is a security platform designed to detect and block vulnerable or malicious open source dependencies by analyzing code behavior.
Software companies, Developer teams, Security operations managers, DevSecOps teams
Runecast Analyzer is a security and compliance platform that supports automated vulnerability assessments and continuous compliance checking for hybrid environments.
IT administrators, Security operations teams, Hybrid cloud managers, Compliance officers
Intigriti connects organizations with a community of over 150,000 ethical hackers to identify and manage security vulnerabilities.
Software companies, Mid-market companies, Enterprise organizations, Organizations with extensive digital attack surfaces
echo is a container security platform that provides automatically patched, hardened, and CVE-free base images for enterprise environments.
Enterprise software companies, Platform engineers, DevOps teams, CISOs
ConnectSecure is a vulnerability and compliance management platform designed for Managed Service Providers to scan and protect client environments.
Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs)
Outpost24 is a cloud-based cybersecurity platform that identifies internet-facing assets and monitors attack surfaces for vulnerabilities.
Small and Medium Businesses, Enterprise Companies, Security Operations Teams
Guardrails is an AI-native application security platform designed to detect, triage, and prioritize software vulnerabilities for developers.
Software companies, Enterprise companies, Development teams
Cyber Risk Guru is an AI-supported threat modelling platform that helps businesses simulate attacks and monitor CVE vulnerabilities based on their registered tech stack.
Small to medium-sized businesses, Security teams, Software developers
Bugcrowd connects organizations with ethical hackers to find and remediate security vulnerabilities through bug bounties and pen testing.
Software companies, Mid-market companies, Enterprise organizations, Security buyers
BugDazz is an on-premise API security scanner that identifies vulnerabilities in REST and SOAP APIs using OWASP Top 10 and LLM test cases.
Software Companies, Enterprise Companies, Product Teams, Security Experts
BrowserTotal is a browser security analysis platform that scans extensions, URLs, and security policies to detect vulnerabilities.
Security professionals, Penetration testers, Enterprise security teams, Software developers
Virsec provides an autonomous workload protection platform designed to mitigate vulnerabilities and block exploits in real time without requiring patches.
Enterprise companies, Mid-market companies, Organizations using legacy software, Security operations teams
Stingrai provides a PTaaS platform that combines AI-assisted security testing with human validation to identify and help remediate vulnerabilities.
Mid-market companies, Enterprise companies, Companies requiring SOC2 or ISO 27001 compliance, DevOps teams with frequent code changes