Nikto

5.7easy start · #27 of 36
in Vulnerability Scanning Software

Free to practise onnot on record
Free trialnot on record
Well documentednot on record
Runs where you worknot on record

Runs on Linux, self-hosted, Windows.

Nikto is ranked #27 of 36 in vulnerability scanning software on The Geeks Club. It runs on Linux, Self-hosted, Windows. There is a free plan.

Nikto plans and pricing

All plans

Nikto Free Free software under GPLv3 · Database files are restricted to use with Nikto; commercial use requires a license github.com · 4 Oct 2026

Compared on vulnerability scanning software

Deployment model: on_premises
Supported targets: web servers; host URLs
Authenticated scanning: Yes

Best Nikto alternatives

See all 20

Intruder 0 of 4 in the starter kit Lesson 17.9 ManageEngine Vulnerability Manager Plus 0 of 4 in the starter kit Lesson 27.9 OpenVAS 0 of 4 in the starter kit Lesson 37.9 Nmap 0 of 4 in the starter kit Lesson 47.8 Qualys External Attack Surface Management 0 of 4 in the starter kit Lesson 57.8 Pentest-Tools Port Scanner 0 of 4 in the starter kit Lesson 67.7

The record

Purpose: Nikto is an open-source web server scanner for security professionals, penetration testers, and system administrators.
Scan coverage: It checks for over 8,000 potentially dangerous or interesting files and programs and identifies outdated server versions and common misconfigurations.
Detection: It identifies installed web servers and software using headers, content, and file analysis, and its scan items and plugins can update automatically.
Reporting: Scans can produce plain text, JSON, SQL, XML, HTML, or CSV reports, including direct reporting to MySQL and PostgreSQL.
Protocols and proxies: Nikto supports IPv4, IPv6, and HTTP proxies.
Authentication: It supports Basic and NTLM host authentication and can guess credentials for Basic, NTLM, and Digest authorization realms.
Scan controls: Users can tune scans to include or exclude vulnerability check classes and scan multiple ports or servers, including servers listed in Nmap output.
Custom checks: Users can add custom checks through CSV files.
False positives: The scanner uses headers, page content, hashing, and other methods to reduce false positives.
TLS and cookies: Nikto detects TLS configuration and fingerprints, handles cookies automatically, and offers an option to disable cookie use.
Install options: The project documents Perl installation, Docker images, and Windows installation.
Support: The project directs users to GitHub or Docker and its documentation for support, and asks users to open GitHub issues for bugs, feature requests, or questions.
License terms: Nikto 2.6 code is GPLv3, while its database files may only be distributed with and used in Nikto unless a commercial license is obtained from the author.
Price from: Free

Where it ranks on The Geeks Club

Best Vulnerability Scanning Software in 2026#27 of 36

Is Nikto yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Nikto

Sources

cirt.net/nikto/· checked 4 Oct 2026
github.com/sullo/nikto/wiki· checked 4 Oct 2026
github.com/sullo/nikto· checked 4 Oct 2026