Snyk
snyk.ioSnyk helps software teams identify and manage security risks in code and dependencies while building AI-enabled applications.
Looking for something like Metasploit? Here are 24 alternatives, ranked by how closely they match it on purpose, features and platforms. Of these, 2 are free or have a free plan and 4 are open source.
Use Metasploit to find security issues, verify mitigations, and manage authorized penetration testing assessments.
| # | Alternative | Pricing | Open source | Platforms |
|---|---|---|---|---|
| 1 | Snyk | — | Not stated | Web |
| 2 | Cheatsheet | — | Not stated | Web |
| 3 | OTP Auth | Freemium | Not stated | iOS, Web |
| 4 | Observatory | — | Not stated | Web |
| 5 | Pentest Contracts | — | Not stated | — |
| 6 | AndroGuard | — | Yes | Android |
| 7 | MobileApp-Pentest-Cheatsheet | — | Not stated | Android, iOS |
| 8 | Awesome Pen Testing | — | Not stated | — |
| 9 | ZeroSSL | — | Not stated | Web |
| 10 | Aegis | — | Not stated | Android, Web |
Snyk helps software teams identify and manage security risks in code and dependencies while building AI-enabled applications.
The Metasploit cheat sheet collects command references for working with the framework.
Manage two-factor authentication codes with OTP Auth, an iOS app listed on the App Store.
Test HTTP security headers such as CSP and HSTS, then review recommendations for improving a site.
Adapt this collection of contract templates for penetration testing engagements.
AndroGuard provides tools for reverse engineering and penetration testing Android applications.
Consult concise notes on mobile application penetration-testing topics with this cheat sheet.
This GitHub list collects resources and tools for penetration testing.
ZeroSSL issues online SSL certificates and supports HTTPS setup through a certificate management interface.
Manage two-step verification tokens on Android with Aegis Authenticator, a free, open-source app.
Manage Windows Firewall rules and receive outbound connection notifications with Windows Firewall Control.
Security and best-practice issues in container images can be checked with Dockle.
Agentic Radar scans agent workflows for security issues and helps developers review potential risks.
Superagent provides an autonomous security platform for testing applications, repositories, agents, and infrastructure.
Test a browser for privacy leaks, including exposed IP addresses, device information, and fingerprinting risks.
Test how trackers and fingerprinting systems see your browser with Cover Your Tracks from the EFF.
SSL Labs provides tools for testing SSL and TLS configurations and related public key infrastructure.
Check browser fingerprints and run DNS leak, IP, port, and WebRTC tests with BrowserScan.
IPv6 Leak Test checks whether a device has IPv6 connectivity and displays connection information related to privacy.
Test browser fingerprinting characteristics with CreepJS, which displays fingerprint and WebRTC results.
AllSafe provides an intentionally vulnerable Android app for security testing and practice.
GoPlus offers Web3 security tools including audits, APIs, a user security hub, and a browser extension.
The Snyk Security Database provides vulnerability details and remediation guidance for packages and cloud configurations.
Discover hosts and map networks with Nmap, a network exploration and security scanning tool.
Alternatives are suggested from the purpose and features described in our listings. Different pages for the same product appear once. Read each description to check whether it fits your task. How we choose alternatives · Suggest an alternative