Security Testing

SecureGPT is a free platform for security testing OpenAI ChatGPT plugins.

SecGPT uses AI to analyze cybersecurity reports and provide insights.

WebTotem delivers an AI‑driven firewall that blocks brute‑force, DoS, SQLi, XSS, bot, spam, path traversal, and emerging threats, with custom IP whitelisting. It scans for malware, defacement, open ports, tracks SSL and domain expiry, scores vulnerabilities, and provides dashboards for collaboration

Hackfast is an AI-driven tool that streamlines penetration testing by organizing scan data, automating reconnaissance, and providing contextual vulnerability insights, tailored attack paths, and project management features for efficient security assessments.

Beagle Security automates web, API, and GraphQL penetration testing using AI trained on 350k workflows. It runs in CI/CD, reports to Jira/Azure/Slack, cuts manual effort, reduces false positives, and gives clear remediation guidance.

Qodex is an automated API testing platform that streamlines test creation and execution, offering features like automated test generation, uptime monitoring, and real-time failure alerts, facilitating efficient testing in CI/CD workflows for developers and QA teams.

ZeroThreat provides a cutting-edge DAST web app & API security scanner featuring secret, GraphQL scanning, and intelligent threat detection. It integrates smoothly with CI/CD pipelines for fast vulnerability assessment and robust proactive cybersecurity.

Secure.com is a 24/7 AI security operations platform that provides agentless asset discovery, continuous monitoring, and automated threat investigation. It centralizes telemetry, prioritizes high-risk incidents, and enables no-code automated response to improve detection and remediation times.

Secureframe automates security, risk, and compliance workflows—collecting evidence, generating readiness reports, and continuously monitoring controls. It centralizes vendor and access data, provides remediation guidance and integrations, and supports CMMC, SOC 2, ISO 27001, HIPAA, PCI DSS.

FastTest Platform is a secure online assessment system that enables test creation, item banking, and adaptive testing. It offers configurable delivery windows, lockdown browsers, MFA, authoring tools, AI‑assisted psychometric analysis, and candidate reporting for quality assurance.

Aura monitors identity data and delivers real‑time alerts for credit activity, phishing, and account takeovers. It offers continuous credit monitoring across all major bureaus, instant credit lock, dark‑web scanning, VPN, antivirus, password management, device lockbox, and family parental controls.

Pentagi.com is an autonomous AI penetration testing platform that orchestrates complex security tests through terminal, browser, and editor automation, using 200+ pre-packaged Kali Linux tools in optimized Docker containers. It leverages a RAG-enabled knowledge graph with semantic memory to track co

Protectstar delivers cross‑platform security with AI‑powered antivirus, anti‑spy, firewall, and data eraser. It monitors camera, microphone, and network traffic to block surveillance and malicious connections while ensuring GDPR‑compliant file deletion.

Sprinto is a continuous security and compliance platform that automates evidence collection and risk monitoring. It integrates with cloud services to streamline audit readiness across 40+ frameworks.

Vanta automates compliance evidence collection for 35+ frameworks like SOC 2, ISO 27001, HIPAA, and GDPR. It centralizes access controls, risk assessments, and vendor reviews, while AI‑driven workflows speed questionnaire responses and continuous monitoring with real‑time alerts.

CodeThreat applies AI to security analysis within development pipelines, automatically scanning pull requests and codebases to pinpoint real vulnerabilities. It filters out weak findings, provides repo‑level architectural summaries, and integrates with GitHub, GitLab, Bitbucket, and CI/CD across 27

RoostGPT auto‑generates unit and API tests for Java, Go, and other languages, using LLMs to uncover edge cases and achieve full coverage in one pass. It also performs static vulnerability scanning and integrates into CI pipelines.

Nightwatch is an AI-powered SEO monitoring tool that offers rank tracking, automated reporting, site audits, and resource optimization. It provides detailed insights on global search engine rankings and allows teams to identify growth opportunities through data-driven decision making.

Hexowatch tracks website changes across visual, content, code, tech stack, availability, price, keywords, backlinks, RSS, WHOIS, sitemaps, and APIs. Real‑time alerts, screenshots, element snapshots, downtime reporting, and webhook/email notifications help teams monitor and respond to updates.

TrustLayer is a cloud-native cybersecurity platform that unifies email security, CASB, web protection and SaaS posture management, offering centralized policy enforcement, real-time threat detection, automated response, and role-based identity controls for MSPs and midmarket IT teams.

Equixly is an AI‑driven continuous offensive security platform that maps and attacks an organization’s attack surface in real time. It automatically discovers APIs, executes adaptive attack paths, validates exploits, and delivers continuous visibility, alerts, and audit‑ready remediation tracking.

Cybedefend is a cloud-based application security testing platform that utilizes AI for code analysis, offering SAST and SCA. It automates vulnerability remediation and integrates with popular developer tools, enhancing security throughout the software development lifecycle.

EasyAudit is an AI-driven platform that simplifies security compliance, enabling faster adherence to frameworks like SOC 2 and GDPR through user-friendly self-assessment reports, automated documentation, and control mapping for efficient audit readiness.

Qwiet AI unifies SAST, SCA, IaC, container, and secrets scanning into one scan, filtering for reachable, exploitable risks. It delivers 97 % true positives, cuts false positives 90%, and auto‑generates unit‑tested fixes, cutting remediation time 80 %.

QA.tech automates end‑to‑end tests across web, mobile, and APIs with AI agents that simulate real users, reducing flakiness, delivering instant CI/CD feedback, logging detailed failures, and automatically updating test cases without infrastructure setup.

ScamMinder evaluates URLs in real‑time, assigning safety scores and risk indicators for phishing, fraud, and malware. Users upload message screenshots for AI analysis, while the platform aggregates community reviews, threat stats, and a site database to verify authenticity.

AI agents scan 300,000+ sources—including dark‑web forums and new domains—to deliver real‑time OSINT alerts with context on threat actors, intent, and campaigns. Customizable workflows target phishing, insider risk, or credential leaks, enabling rapid response and fraud reduction.

Quick Intel scans smart contract addresses across 54+ chains, delivering AI‑driven analysis in seconds. It flags hidden code, identifies scam patterns, and shows warning labels while recording key attributes for risk assessment.

testRigor is an AI‑driven, no‑code test automation platform that turns plain‑English instructions into end‑to‑end tests for web, mobile, desktop, API, and mainframe. It records real‑user interactions, supports cross‑browser validation, CI/CD integration, and self‑healing for low‑maintenance, reliabl

worldmonitor.app is a real-time global intelligence dashboard that overlays live signals from 500+ feeds and 65+ data providers onto an interactive map. It correlates geopolitical events, infrastructure outages, and sensor alerts with market movements for analysts, traders, and risk managers.

Visualping monitors website changes—visual, textual, or code—in real time, sending alerts via email, Teams, Slack, webhooks, or API. It provides before‑and‑after screenshots, AI‑highlighted significant changes, and easy browser integration for individuals and teams.

IdeaProof.io is an AI tool that validates startup concepts in about 120 seconds through automated market analysis and structured criteria. It generates investor-ready reports with TAM estimates, competitor maps, and prioritized risks to inform go-to-market strategy.

Jazzberry is an AI-driven bug detection tool that analyzes code repositories in a secure environment, identifying vulnerabilities like SQL injection and authentication bypasses. It prioritizes data security with enterprise-grade measures and provides efficient, categorized bug identification.

claude-dev.tools is a session analysis and debugging suite for Claude that reconstructs full session context and provides detailed token attribution across all components. It offers local and remote log inspection, execution trace visualization, and security monitoring through a self-hosted, open-so

Swif's AI-driven unified device management simplifies security, access, and compliance on MacOS, Windows, and Linux. It automates control, configures smart groups, boosts remote operations, and integrates smoothly for SOC2 certification, ensuring data protection.

DryRun Security is an AI tool that automates real-time pull request security analysis. It offers customized feedback on authentication, authorization, and sensitive code paths during coding, ensuring safer and faster development while being compatible with multiple languages and frameworks.

VibeSec scans public and private GitHub repositories using AI and Semgrep to detect vulnerabilities, insecure patterns, and exposed secrets, producing prioritized, actionable security reports for PR reviews, CI pipelines, and developer triage.

CodeRabbit automates pull‑request reviews with AI, detecting bugs instantly and suggesting fixes. It integrates with Git, IDEs, and CLI, delivers diff summaries, diagrams, and a chat interface, all while preserving privacy with encryption and zero‑data retention.

Katalon is an AI-augmented test automation platform that streamlines automated testing for web, mobile, desktop, and APIs, featuring low-code scripting, seamless CI/CD integration, and on-demand execution across multiple environments for enhanced efficiency.

Marketing Tool aggregates free utilities for marketing and web performance. It offers keyword research, backlink and SEO audits, social media scheduling, hashtag generation, ad‑budget calculators, speed testing, image compression, plagiarism checks, URL shortener, QR code. No registration required.

Hexowatch monitors visual, content, HTML, and code changes on any URL, alerts on keyword, tech stack, and script updates, and tracks availability, WHOIS, sitemaps, API responses, and backlinks. It archives snapshots for compliance and quick market response.

Mindgard automates reconnaissance, assessment, and defense for AI models, agents, and apps, delivering continuous evaluation, real‑time threat detection, self‑healing remediation, and attack‑surface mapping to reduce manual effort and shorten assessment timelines.

StackBob is an identity and access management solution that streamlines user access and license management for over 300,000 applications. It automates access provisioning, monitors spending, and optimizes costs, enhancing productivity and compliance within organizations.

CensysGPT automates query construction for the Censys search engine, converting Shodan, ZoomEye, BinaryEdge, and legacy syntax into real‑time host reconnaissance queries. It streamlines threat‑hunting by quickly generating actionable host insights on services, ports, and metadata.

Depshub is a dependency management tool that automates updates, license checks, and vulnerability scans. It provides a centralized view of dependencies, integrates with platforms like GitHub, and offers AI analysis to streamline development workflows and enhance code security.

Momentic is an AI-powered testing tool that generates and maintains end-to-end and regression tests from UI flows and user stories, runs cross-browser parallel suites, detects flaky tests, performs visual regression checks, and provides failure analysis and quality analytics.

Unspam Email Spam Checker analyzes outgoing mail for deliverability by scoring spam triggers, validating SPF/DKIM/DMARC/BIMI, checking blacklist status, broken links, short URLs, and DNS reputation to improve inbox placement for email success.

Trendspid is a comprehensive trade platform offering technical analysis tools, price alerts, market scanning, backtesting strategies, raindrop charts, unusual option flow tracking, and a 7-day free trial with market data from multiple sources.

Codehound is an AI-driven smart contract auditing tool that automates security assessments across multiple blockchain networks. It detects vulnerabilities in Solidity files and projects, offering detailed reports and a Visual Studio Code extension for efficient integration.

Vectra AI ingests and normalizes traffic from data centers, cloud, SaaS, IoT, and identity sources. Its AI engine detects MITRE ATT&CK techniques, prioritizes alerts, and supports containment of compromised devices, accounts, and traffic paths, integrating with SIEM, EDR, MDR workflows.