63 penetration testing apps in one list: the established products, and every new one as it launches.
Updated
15 apps launched in the last 12 months, by month.
“penetration testing tool” is searched 14,800 times a month on Google worldwide. These are the 55 searches around it, in the US.
| Search | Per month, US | Cost per click |
|---|---|---|
| penetration test tools | 2,400 | $43.66 |
| nmap penetration testing tool | 210 | - |
| automated penetration testing tool | 110 | $108.44 |
| web app penetration testing tool | 110 | - |
| web penetration testing tool | 110 | - |
| zanti mobile penetration testing tool | 110 | - |
| best penetration testing companies | 90 | $377.31 |
| free penetration testing tool | 70 | $20.60 |
| network penetration testing tool | 70 | $43.63 |
| free pen testing tools | 50 | $42.29 |
| penetration testing reporting tool | 50 | $99.26 |
| top 10 pentesting tools | 50 | $62.45 |
| pen testing tools open source | 40 | $18.42 |
| burp suite penetration testing tool | 30 | - |
| online penetration testing tool | 30 | $69.85 |
Cost per click is what advertisers bid for one visit from that search. Figures from Oct 2026.
The apps we added to this market most recently.
| # | App | Added |
|---|---|---|
| 1 | DE Decloak Security intelligence for teams from vibe coders to enterprise | |
| 2 |  Xalgorix Xalgorix is an open-source AI penetration-testing agent built to do more than produce a list of possible vulnerabilities. It works through a structured 22-phase methodology covering reconnaissance, au | |
| 3 |  AgentRidge AgentRidge helps pentest teams run authorized engagements from a single desktop Mission Control. The Principal agent plans missions, dispatches Ridge Sub-Agents that execute real tools locally, observ | |
| 4 |  Pwn Join 3,000+ cybersecurity professionals learning from 100+ hands-on tutorials. | |
| 5 | CO Complyeah Run external pentests auditors accept for $50 | |
| 6 |  NullSquare Continuously pentest your web, API, cloud, and private assets | |
| 7 |  BestDefense AI attacks don’t wait for your next sprint. BestDefense continuously pentests every deploy, proves which vulnerabilities are actually exploitable, and generates fixes so high-compliance SaaS teams can patch real risks before remediation windows close. Unlike static scanners, BestDefense validates exploits through execution, cuts false positives, and helps developers move from finding issues to fixing them faster. | |
| 8 | DA Darkmoon Most AI pentesting tools stop at the web layer. Darkmoon goes further. Built by professional pentesters, it combines 18 specialized AI agents and 80+ offensive security tools to assess Active Directory, Kubernetes, cloud infrastructure, APIs, CMSs, and networks. Self-hosted, open-source, MITRE-mapped, and designed to deliver evidence-backed findings, attack paths, and publication-ready reports. | |
| 9 |  DeepFrame DeepFrame — a luxury security studio running authorized deep pentests for fast-moving web apps. Depth, clarity, retest. | |
| 10 |  Revelion Add autonomous AI pentesting to your MSP stack | |
| 11 |  Cerberus Cerberus is the world's first safe AI hacker. You can hack your entire app in plain English with a prompt "find vulnerabilities and exploit them in example.com". We also built the world's first AI hacker that's mathematically safe to run on production. It uses a new programming language where every hacking action must come with a mathematical proof that you authorized it — no proof, no action. Point it at your app, come back in 3-4 hours with a full security report. | |
| 12 |  AISafe Labs On-demand security assessments for web applications |
Grouped by what each app says it does. 23 of 63 apps fit a group so far.
| Type | Apps | Share | Examples |
|---|---|---|---|
| AI pentesting tools | 6 | 26.1% | Cerberus, Darkmoon, Revelion |
| Penetration testing services | 5 | 21.7% | Astra Security, DeepFrame, DeepStrike |
| Automated security testing | 4 | 17.4% | NullSquare, PurpleRidge, Radar by OnSecurity |
What we could detect on their websites.
| Framework | Apps | Share |
|---|---|---|
| Next.js | 19 | 67.9% |
| WordPress | 3 | 10.7% |
Of 28 apps whose framework we could detect.
| Host | Apps | Share |
|---|---|---|
| Vercel | 13 | 92.9% |
Of 14 apps whose host we could detect.
How many of the 63 apps show a price, and how many sell to large companies.
| Measure | Apps | Share of 63 |
|---|---|---|
| Publish a pricing page | 17 | 27.0% |
Security and engineering teams use penetration testing to measure real-world risk and harden systems with proof, not assumptions.
4 more types of penetration testing apps with Starter.See plans
The rest of the guide to penetration testing apps with Starter.See plans
3 more answers about penetration testing apps with Starter.See plans
40 more searches around “penetration testing tool” on Starter and Pro. See plans
