Audience
Anyone searching for a web server scanner solution
About Nikto
Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6700 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version-specific problems on over 270 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software. Scan items and plugins are frequently updated and can be automatically updated. Nikto is not designed as a stealthy tool. It will test a web server in the quickest time possible and is obvious in log files or to an IPS/IDS. However, there is support for LibWhisker's anti-IDS methods in case you want to give it a try (or test your IDS system). Not every check is a security problem, though most are.
Other Popular Alternatives & Related Software
DefectDojo
Take DefectDojo for a spin and review the demo of DefectDojo and login with sample credentials. DefectDojo is available on Github and has a setup script for easy installation. A docker container with a pre-built version of DefectDojo is available. Know exactly when new vulnerabilities are introduced in a build or remediated. Tracking when a product is assessed is easily accomplished using DefectDojo's API to track security tests that are run on each build. DefectDojo has the ability to track the build-id, commit hash, branch or tag, orchestration server, source code repo, and build server for every on-demand security test. Various reports are available for tests, engagements, and products. Products can be grouped into critical products to track products that are critical to your organization. Similar findings can be easily merged into one finding to provide developers one finding instead of multiple findings.
Learn more
QuickPatch+
Vulnerability scanner for Plesk that provides reliability, configuration recommendations and automatic fixes for servers running Plesk control panel. Quick Patch+: Analyzes your server configuration and allows you to select and fix vulnerabilities from within the UI; Allows you to configure the automatic daily fix of all vulnerabilities, or only critical ones; Provides email and dashboard notifications for automatically fixed vulnerabilities and newly discovered critical vulnerabilities. If your website or web application’s security is compromised, it can become unresponsive, unavailable, or even dangerous. The impact on your business can be substantial. For a small monthly fee, you can protect your web server with a hands-off, automated approach.
Learn more
Hiro Game Development
Hiro is a client-server library built on the Nakama game server to rapidly and flexibly add economy, social, and LiveOps features to your game. It is available as a C# library for Unity Engine, a C++ library for Unreal Engine, and a server package that integrates with the game server. Hiro offers a comprehensive suite of battle-tested metagame features that are quick to implement, allowing developers to focus more on the core gameplay experience. Add base and loot table rewards for players to collect; integrate soft or real currency purchases; define stackable and consumable gameplay items; initialize and manage multiple currencies within the game economy. Adapt store bundles and offer walls based on player behavior; personalize various aspects of the player experience through experiments; schedule live events for players to participate in and earn exclusive rewards. Start and schedule timed or scored events with exclusive rewards; enable players to request and share inventory.
Learn more
N-Stalker
N-Stalker Web Application Security Scanner X is a sophisticated Web Security Assessment solution for your web applications. By incorporating the well-known “N-Stealth HTTP Security Scanner” and its 39,000 Web Attack Signature database along with a patent-pending Component-oriented Web Application Security Assessment technology, N-Stalker is a “must have” security tool to developers, system/security administrators, IT auditors and staff. Most complete package for developers, IT security and governance professionals. It contains security checks for web application and server infrastructure. For Web Server Administrators and IT Professionals, a solution to assess security of your web server infrastructure. A community edition with a restricted set of security checks for both application and web server infrastructure.
Learn more
Integrations
Company Information
CIRT.net
cirt.net/Nikto2
Videos and Screen Captures
Other Useful Business Software
Ship Agents Faster
Gemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
Product Details
Platforms Supported
Cloud
Training
Documentation
Support
Online
