For security penetration testing, the most relevant options are Nmap for network scanning 8, sqlmap for automated SQL injection testing 4, and Metasploit for running and managing penetration tests 6, with OWASP's free application security tools such as ZAP and its threat-modeling resources as a foundation 1. Pentest-Tools.com offers a combined vulnerability scanning and pentesting service for web, network and cloud 2.
- 1
- 2
sqlmapsqlmap.orgwebsite read, tools not yet checked
Open-source penetration testing tool that automates detecting and exploiting SQL injection flaws and taking over the databases behind them.
+2 community tools built for it
- 3
Metasploitmetasploit.comwebsite read, tools not yet checked
Penetration testing software for finding security issues, verifying vulnerability mitigations and managing security assessments.
+6 community tools built for it
- 4
Pentest-Tools.compentest-tools.comwebsite read, tools not yet checked
Vulnerability scanning and validation, autonomous AI pentesting and human-led offensive security testing for web, network and cloud targets.
- 5
OWASP Foundationowasp.orgfound in code, not yet checked
Nonprofit behind the free application security projects including the Top 10, ASVS and ZAP, with threat-modeling frameworks listed via its tools.
+16 community tools built for it
for agents: list_frameworks · create_custom_framework · list_knowledge_base_mitigations
Sources
- 1OWASP Foundation - The Open Source Foundation for Application Securityowasp.org · read 2026-10-29
- 2Autonomous pentesting, continuous monitoring - Pentest-Tools.compentest-tools.com · read 2026-10-29
- 4sqlmap — automatic SQL injection and database takeover toolsqlmap.org · read 2026-10-29
- 6Metasploit | Penetration Testing Software, Pen Testing Security | Metasploitmetasploit.com · read 2026-10-29
- 8Nmap: the Network Mapper - Free Security Scannernmap.org · read 2026-10-29
For agents: the 10 actions behind this answer
list_frameworks · www-project-threatatlas found in code, not yet checked
List threat-modeling frameworks (e.g. STRIDE, LINDDUN) available to the user.
· Pentest-Tools.com website read, tools not yet checked
Vulnerability scanning and validation, autonomous AI pentesting, and human-led offensive security testing in one place. For web, network, and cloud.
· Pocsuite3 website read, tools not yet checked
Open source remote vulnerability testing and proof-of-concept development framework developed by the Knownsec 404 Team
· sqlmap website read, tools not yet checked
sqlmap is an open-source penetration testing tool that automates detecting and exploiting SQL injection flaws and taking over the databases behind them. Dual-licensed under GPLv2 and a commercial license.
· evilsocket website read, tools not yet checked
Hi! This is the security research blog of Simone Margaritelli, an Italian cybersecurity researcher and open-source developer. I build penetration testing tools…
· Metasploit website read, tools not yet checked
Find security issues, verify vulnerability mitigations & manage security assessments with Metasploit. Get the world's best penetration testing software now.
· Playwright website read, tools not yet checked
Web automation and testing for apps, scripts, and AI agents
· Nmap: the Network Mapper website read, tools not yet checked
Nmap Free Security Scanner, Port Scanner, & Network Exploration Tool. Download open source software for Linux, Windows, UNIX, FreeBSD, etc.
· AFLplusplus website read, tools not yet checked
The AFLplusplus website
· Joern website read, tools not yet checked
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.