Alternatives to WPScan
WordPress security scanner for plugin, theme and configuration checks. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
WPScan
WordPress security scanner for plugin, theme and configuration checks.
Replacements
Listings that take over the same core job as WPScan.
WPSec
An online scanner that checks WordPress sites for known vulnerabilities in core, plugins and themes.
WPSec runs in the browser with an instant free scan and scheduled scans with email alerts, writing reports for non-specialists instead of a command-line tool.
Similar software
Related functionality, not a direct replacement.
Nikto
Web server scanner for risky files, outdated software and misconfigurations.
Nuclei
A fast vulnerability scanner driven by YAML templates contributed by thousands of security researchers.
ZAP
Open-source web application security scanner and intercepting proxy.
Wapiti
Check web applications with a Python-based vulnerability scanner.
HackerTarget WhatWeb Scan
An online scan that runs WhatWeb and Wappalyzer to fingerprint the technologies behind a website.
Sucuri SiteCheck
Free remote scanner that checks a website for visible malware, blocklisting and outdated software.
