Compare software

ZAP vs Detectify: catalog facts
ZAPDetectify
Free

Free and open source under the Apache licence.

Paid

Commercial service with a trial available; pricing is aimed at organisations.

Windows, macOS, Linux, Browser extension Web
  • Intercepting proxy plus automated scanning in one free tool
  • API and automation framework make it usable inside CI pipelines
  • Continuous discovery of external assets such as subdomains and ports
  • Payload-based testing rather than version matching
  • Active scanning can damage a live application and must only be run with permission
  • Java application with a heavy interface
  • Intended for authorized testing of assets you own or have permission to scan
  • Priced and built for organisations rather than individuals
Downloadable app, Browser extension Hosted service
Open source Closed source
License: Apache-2.0 License not stated
Not stated if an account is needed Account needed
Not stated if it works offline Needs internet

Checked September 22, 2026

Checked October 1, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.