Open alternatives3
Open-source apps that replace Plextrac, Vulcan and more
Nuclei is a free command-line tool that checks websites, servers and networks for known security weaknesses. It is aimed at security professionals and IT teams, who write or reuse simple text-based templates to define each check.
Faraday is a self-hosted platform that gathers security scan results from many tools into one place so teams can track and fix vulnerabilities. It is for security professionals and the managers and analysts who work with their findings.
ThreatMapper is a security tool that scans running cloud, container and server systems for software vulnerabilities, exposed secrets and risky configurations. It is aimed at security and operations teams who watch production infrastructure.
What's missing
What people still miss here, and wish existed. Upvote what matters to you.
Before you build
Planning something for security scanning? See what exists first, so you can reuse parts or explain what's different. Paste this into any AI assistant:
Fix the list itself
A project or closed app missing from this list, or a mistake on it? These open a short form on GitHub, and a mod reviews it. To say what a project can't do, use What's missing.
About this page
Replaces fully means it does the main job of these apps; Replaces partly means it covers some of it.
Licenses: every project here uses an open-source license (what each one means). Open core means some parts are paid or under another license.
GitHub stars are shown for reference. They measure popularity, not whether it replaces anything.
Verified means r/TrueOpenSource mods checked it: open-source license, maintained, and it really does the job.
How Open Source Everything works