Skip to content
CloudTweaks

Guided scenario

Budget vulnerability scanning

Finding security holes across hosts, networks, and web apps shouldn't require a big platform spend. This shortlist ranks vulnerability scanners by value, including affordable commercial and open-source options. Weigh agent vs. agentless (or both) coverage, web-app/container/cloud scanning breadth, and risk-based prioritization against price, and check how licensing scales with the number of assets you need to scan.

Edgescan

www.edgescan.com

Vulnerability Management

Edgescan is a Dublin-founded SaaS platform unifying DAST, API security testing, network vulnerability management, mobile app testing, and attack surface management, with optional human-validated PTaaS.

$$$ Premiumusage-based pricing
Relevant for
Agentless scanning +33 certifications

Greenbone

www.greenbone.net

Vulnerability Management

Greenbone is the German company stewarding OpenVAS, the leading open-source vulnerability scanner, with free and commercial editions.

$$ Midusage-based pricing
Relevant for
Free tierOpen-sourceSelf-hostable

Holm Security

www.holmsecurity.com

Vulnerability Management

Holm Security is a Swedish Next-Gen Vulnerability/Exposure Management platform covering systems, networks, web applications, APIs, cloud-native platforms, Kubernetes and containers, and user (phishing) risk.

$$ Midusage-based pricing
Relevant for
Self-hostableMid tier

Intruder

www.intruder.io

Vulnerability Management

Intruder is a SaaS vulnerability scanner aimed at lean security teams and startups, with issues triaged by severity out of the box.

$$ Midfrom $153/mo · Last reviewed May 2026
Relevant for
Low entry priceMid tier

Qualys

www.qualys.com

Vulnerability ManagementCloud Security (CSPM/CNAPP)

Qualys delivers the cloud-based Enterprise TruRisk platform, with VMDR for vulnerability management, detection, and response.

$$$ Premiumusage-based pricing
Relevant for
Self-hostableAgent-based scanning +5

Rapid7

www.rapid7.com

Vulnerability ManagementSIEM / Security AnalyticsCloud Security (CSPM/CNAPP)

Rapid7 InsightVM is a vulnerability-management platform spanning endpoint to cloud, using a single Insight Agent plus agentless scan engines.

$$$ Premiumusage-based pricing
Relevant for
Self-hostableAgent-based scanning +5

Tenable

www.tenable.com

Vulnerability ManagementCloud Security (CSPM/CNAPP)

Tenable is the vulnerability-management pioneer behind Nessus, serving enterprises and government with an asset-priced subscription portfolio.

$$$ Premiumusage-based pricing
Relevant for
Self-hostableAgent-based scanning +5