OWASP Nettacker

6.9easy start · #9 of 36
in Vulnerability Scanning Software

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on api, Linux, Mac, self-hosted, Web, Windows.

OWASP Nettacker is ranked #9 of 36 in vulnerability scanning software on The Geeks Club. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is a free plan.

OWASP Nettacker plans and pricing

All plans

OWASP Nettacker Free Open-source software · Apache License 2.0 owasp.org · 4 Oct 2026

Compared on vulnerability scanning software

Deployment model: on_premises
Supported targets: IPv4 addresses, IPv4 ranges, IPv4 CIDR blocks, domains, HTTP and HTTPS URLs
Authenticated scanning: Yes

Best OWASP Nettacker alternatives

See all 12

Intruder 0 of 4 in the starter kit Lesson 17.9 ManageEngine Vulnerability Manager Plus 0 of 4 in the starter kit Lesson 27.9 OpenVAS 0 of 4 in the starter kit Lesson 37.9 Nmap 0 of 4 in the starter kit Lesson 47.8 Qualys External Attack Surface Management 0 of 4 in the starter kit Lesson 57.8 Pentest-Tools Port Scanner 0 of 4 in the starter kit Lesson 67.7

The record

Purpose: Automates information gathering, vulnerability scanning, and penetration testing, including discovery of open ports, services, misconfigurations, default credentials, and subdomains.
Interfaces: Can run as a command-line utility, Docker container, API, or Web GUI.
Scanning: Its modular architecture supports prebuilt and customizable modules for different scanning tasks.
Reports: Generates scan reports in HTML, TXT, JSON, and CSV formats.
Implementation: The project says Nettacker is written entirely in Python and does not rely on launching external tools.
Integrations: The latest release lists SARIF and DefectDojo-compatible reports, and the project supports Maltego transforms.
Install options: Documentation describes installation from source with Poetry, from PyPI with pip or pipx, and with Docker.
Platform support: Natively supports Linux, macOS, and FreeBSD; users of other operating systems can use Docker, and native Windows support is being worked on.
Runtime requirement: The installation guide currently supports Python 3.11–3.12 and says compatibility with later Python versions is in progress.
Security policy: The project provides security updates for the latest stable release and current master branch, while older versions may not receive updates.
Vulnerability reporting: The security policy directs vulnerability reports through a private GitHub Security Advisory and describes a responsible disclosure process.
Support: The security policy points users to GitHub Issues and the OWASP Slack #project-nettacker channel for general inquiries.
Intended users: The project describes its intended users as cybersecurity professionals and ethical hackers conducting reconnaissance, vulnerability assessments, and network security audits.
Authorization: The repository warns users to obtain permission or consent from system owners or administrators before targeting systems.
Price from: Free

Where it ranks on The Geeks Club

Best Vulnerability Scanning Software in 2026#9 of 36

Is OWASP Nettacker yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote OWASP Nettacker

Sources

owasp.org/projects/nettacker· checked 4 Oct 2026
owasp.github.io/www-project-nettacker/· checked 4 Oct 2026
nettacker.readthedocs.io/en/latest/Installation/· checked 4 Oct 2026
github.com/OWASP/Nettacker/blob/master/SECURITY.md· checked 4 Oct 2026
github.com/OWASP/Nettacker· checked 4 Oct 2026