Zed Attack Proxy (ZAP) is a tool to find security vulnerabilities in web applications.
License: Open Source
Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6700 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers. Developed by Chris Sullo and David Lodge
License: Open Source
Feature | Zed Attack Proxy | Nikto |
---|---|---|
Penetration Testing | ||
Proxy support | ||
HTTP Monitoring | ||
Debugger | ||
Monitor HTTP Traffic | ||
One click installation | ||
Admin Panel with builtin SSL and emails | ||
Administrative Reporting | ||
Forces encrypted connection | ||
Legacy Firefox Addon | ||
Built in docs | ||
HTTP mocking | ||
One click interception | ||
OpenAPI integration | ||
Support of TFS | ||
Command line interface | ||
Heuristic Detection |