Pentest Contracts
github.com/cure53/ContractsAdapt this collection of contract templates for penetration testing engagements.
Looking for something like Nuclei? Here are 24 alternatives, ranked by how closely they match it on purpose, features and platforms. Of these, 1 are free or have a free plan and 4 are open source.
Nuclei scans for vulnerabilities using customizable templates written in YAML.
| # | Alternative | Pricing | Open source | Platforms |
|---|---|---|---|---|
| 1 | Pentest Contracts | — | Not stated | — |
| 2 | Nuclei | — | Yes | — |
| 3 | Oscp Exam Report Template Markdown | — | Yes | Windows |
| 4 | Cli | — | Not stated | — |
| 5 | Results | — | Not stated | Web, Windows |
| 6 | OSCP-Exam-Report-Template-Markdown | — | Not stated | Web, Windows |
| 7 | Octane | — | Not stated | Web |
| 8 | BeVigil | — | Not stated | Android, Web |
| 9 | Agentic Radar | — | Yes | — |
| 10 | masscan | — | Yes | — |
Adapt this collection of contract templates for penetration testing engagements.
Scan applications, APIs, networks, DNS, and cloud configurations for vulnerabilities using Nuclei.
Use Markdown templates to prepare reports for listed Offensive Security certification exams.
Snyk CLI scans and monitors software projects for security vulnerabilities.
Ndiff compares Nmap scan results from two XML files, showing changes such as hosts and ports appearing or disappearing.
This Markdown template helps candidates prepare reports for Offensive Security certification exams.
Octane analyzes application code to find exploitable security vulnerabilities and trace attack paths.
BeVigil scans mobile apps and provides security scores based on its indexed app data.
Agentic Radar scans agent workflows for security issues and helps developers review potential risks.
Scan TCP ports with masscan, an asynchronous scanner designed for large network ranges.
Manage two-factor authentication codes with OTP Auth, an iOS app listed on the App Store.
Generate secure SSL configurations for selected web, database, and mail software.
Solve reverse engineering challenges published on challenges.re, a challenge-focused site.
GoPlus offers Web3 security tools including audits, APIs, a user security hub, and a browser extension.
Search the National Vulnerability Database, a public resource for vulnerability information.
View Toronto Police calls for service on a map that updates in real time, according to the supplied page description.
Add proof-of-work verification to websites with mCaptcha, a privacy-focused automated CAPTCHA system.
WhatsMyDNS checks DNS record propagation across global resolvers for record types including A, AAAA, MX, and TXT.
Use Metasploit to find security issues, verify mitigations, and manage authorized penetration testing assessments.
The Snyk Security Database provides vulnerability details and remediation guidance for packages and cloud configurations.
The URL Decoder and Encoder converts text between encoded and decoded forms, including JavaScript URLs.
Lucia was deprecated in March 2025. The website was updated in July 2026 and points to code/auth_session.ts as a single-file replacement for the NPM package and to the Auth Book for auth information.
DNSPerf compares the performance and uptime of enterprise and commercial DNS providers.
Search a community-curated collection of bug bounty writeups and learning resources.
Alternatives are suggested from the purpose and features described in our listings. Different pages for the same product appear once. Read each description to check whether it fits your task. How we choose alternatives · Suggest an alternative