LegitShow is the trusted source on every newly launched software product: what it does, who it’s for, how it actually holds up, and whether the AI engines are already reading it. Built to be what AI cites.

Web apps, SaaS, AI tools, MCP servers and developer tools. How we measure →

Legit.Show benchmarks every launched service it lists — measured deterministically from the public surface. See the methodology →

Cross-links · Directory · Reports · Insights · What AI reads · Methodology · About

Privacy · Terms · @Legit_Show on X · GitHub · operated by Madeflo Inc., a Delaware corporation. Benchmark engine powered by commit.show.

Ranked by measurement

Best vulnerability scanner

45 tested · top 45 shown

3 more could only be measured on fewer than five frames, so they are not ranked here — a partial average is not comparable with a full one.

Ordered by a seven-frame production-readiness benchmark measured from each product's public surface — not popularity, pricing or feature count. Nobody pays to appear here and the order is never edited. How it is measured →
How this field scores
low 67median 86best 99
  1. 1
    Depwarden
    Dependency vulnerability and licence scanner for software builds.
    Perf 99
    Acce 91
    Sec 100
    Priv 100
    Rel 100
    Std 100
    Disc 100
    depwarden.in · measured 2026-11-05
    7/7 frames
  2. 2
    qsa.sh
    Command-line external port and vulnerability scanner for your own public IP.
    Perf 100
    Acce 100
    Sec 100
    Priv 100
    Rel 100
    Std 92
    Disc 100
    qsa.sh · measured 2026-10-30
    7/7 frames
  3. 3
    LaunchLint
    Security preflight scanner for AI-built apps before they go live.
    Perf 100
    Acce 96
    Sec 100
    Priv 100
    Rel 100
    Std 92
    Disc 100
    getlaunchlint.com · measured 2026-10-31
    7/7 frames
  4. 4
    MAGDOX
    MAGDOX offers two security products: Code Security for source repositories and FDIE for firmware.
    Perf 91
    Acce 100
    Sec 100
    Priv 100
    Rel 100
    Std 94
    Disc 100
    magdox.io · measured 2026-10-30
    7/7 frames
  5. 5
    Rowly
    Rowly scans Supabase app configurations for security misconfigurations from the outside.
    Perf 100
    Acce 100
    Sec 100
    Priv 100
    Rel 100
    Std 89
    Disc 100
    rowly.me · measured 2026-11-01
    7/7 frames
  6. 6
    Sentrint
    Sentrint scans GitHub repositories for security findings and dependency advisories.
    Perf 92
    Acce 100
    Sec 100
    Priv 100
    Rel 100
    Std 92
    Disc 100
    sentrint.com · measured 2026-11-01
    7/7 frames
  7. 7
    Darkmoon
    Autonomous AI penetration testing platform using 18 agents and 80+ integrated tools.
    Perf 88
    Acce 100
    Sec 100
    Priv 100
    Rel 100
    Std 92
    Disc 100
    dark-moon.org · measured 2026-11-06
    7/7 frames
  8. 8
    Bouncer Security Check
    Bouncer Security Check scans npm packages and MCP servers before you install them.
    Perf 99
    Acce 100
    Sec 80
    Priv 100
    Rel 100
    Std 92
    Disc 100
    bouncer.run · measured 2026-11-01
    7/7 frames
  9. 9
    Puaro
    Puaro is an AI-powered secret scanning platform for code repositories.
    Perf 82
    Acce 93
    Sec 100
    Priv 100
    Rel 100
    Std 97
    Disc 100
    puaro.io · measured 2026-10-27
    7/7 frames
  10. 10
    VibeZero
    Automated security scanner that gives AI-built apps a go/no-go release decision.
    Perf 70
    Acce 97
    Sec 100
    Priv 100
    Rel 100
    Std 100
    Disc 100
    vibezero.io · measured 2026-10-27
    7/7 frames
  11. 11
    Aegyn
    Aegyn scans Supabase projects for security vulnerabilities before they reach production.
    Perf 78
    Acce 94
    Sec 100
    Priv 100
    Rel 100
    Std 86
    Disc 100
    aegyn.dev · measured 2026-11-10
    7/7 frames
  12. 12
    Perfai Security
    Autonomous application security platform for AI-built apps.
    Perf 91
    Acce 100
    Sec 100
    Priv 100
    Rel 75
    Std 92
    Disc 100
    perfai.ai · measured 2026-11-02
    7/7 frames
  13. 13
    Socket
    Socket protects software supply chains by blocking malicious open source packages.
    Perf 80
    Acce 97
    Sec 100
    Priv 100
    Rel 100
    Std 97
    Disc 85
    socket.dev · measured 2026-11-06
    7/7 frames
  14. 14
    InsurStaq AI
    InsurStaq AI is a local security analysis tool for source code that runs on Mac.
    Perf 84
    Acce 89
    Sec 80
    Priv 100
    Rel 100
    Std 100
    Disc 100
    insurstaq.ai · measured 2026-10-29
    7/7 frames
  15. 15
    Who
    Free security tool that shows who can push code to your npm dependencies.
    Perf 86
    Acce 95
    Sec 100
    Priv 100
    Rel 100
    Std 100
    Disc 70
    whosthere.dev · measured 2026-11-03
    7/7 frames
  16. 16
    Edgewise Lab
    Ship Kit checks AI-built apps for common safety and launch issues before you go live.
    Perf 99
    Acce 96
    Sec 80
    Priv 70
    Rel 100
    Std 100
    Disc 100
    edgewiselab.co.uk · measured 2026-11-01
    7/7 frames
  17. 17
    Firewall
    Protect your software supply chain with Hextrap Firewall. Real-time package scanning, allow/deny lists, typosq
    Perf 96
    Acce 95
    Sec 80
    Priv 100
    Rel 100
    Std 89
    Disc 85
    hextrap.com · measured 2026-11-02
    7/7 frames
  18. 18
    Snyk
    Snyk is an AI security platform that secures code, models, and agents.
    Perf 47
    Acce 97
    Sec 100
    Priv 100
    Rel 100
    Std 86
    Disc 90
    snyk.io · measured 2026-10-30
    7/7 frames
  19. 19
    vibecheck
    Security scanner for GitHub repos built with AI coding assistants.
    Perf 67
    Acce 97
    Sec 100
    Priv 75
    Rel 100
    Std 86
    Disc 100
    vibecheck.it.com · measured 2026-11-09
    7/7 frames
  20. 20
    Sonar
    Sonar provides code quality and security verification tools for development teams.
    Perf 74
    Acce 97
    Sec 100
    Priv 75
    Rel 75
    Std 92
    Disc 100
    sonarsource.com · measured 2026-11-03
    7/7 frames
  21. 21
    AbyssGuard
    AbyssGuard scans AI-built apps for security risks before launch.
    Perf 93
    Acce 100
    Sec 45
    Priv 75
    Rel 100
    Std 92
    Disc 100
    abyssguard.app · measured 2026-10-30
    7/7 frames
  22. 22
    Onam Security
    Cloud security platform covering CSPM, CIEM, CWPP, and compliance across major cloud providers.
    Perf 70
    Acce 97
    Sec 45
    Priv 100
    Rel 100
    Std 92
    Disc 100
    onamsecurity.com · measured 2026-11-01
    7/7 frames
  23. 23
    Sandchest
    Sandchest scans code for real security vulnerabilities using AI models.
    Perf 98
    Acce 100
    Sec 45
    Priv 100
    Rel 100
    Std 100
    Disc 60
    sandchest.com · measured 2026-11-06
    7/7 frames
  24. 24
    GitGuardian
    GitGuardian detects and helps remediate exposed secrets across code and developer tools.
    Perf 49
    Acce 89
    Sec 80
    Priv 100
    Rel 100
    Std 92
    Disc 70
    gitguardian.com · measured 2026-10-30
    7/7 frames
  25. 25
    Veracode
    Veracode is an application risk management platform for securing software across the development lifecycle.
    Perf 29
    Acce 92
    Sec 100
    Priv 75
    Rel 90
    Std 97
    Disc 100
    veracode.com · measured 2026-10-31
    7/7 frames
  26. 26
    MeshaSec
    On-premise AI application security platform with DAST, SAST, SCA, and a unified security copilot.
    Perf 62
    Acce 91
    Sec 45
    Priv 100
    Rel 100
    Std 92
    Disc 87
    meshasec.com · measured 2026-11-05
    7/7 frames
  27. 27
    CleanSlop
    CleanSlop scans code for security and reliability issues, then helps fix them.
    Perf 100
    Acce 97
    Sec 35
    Priv 75
    Rel 100
    Std 92
    Disc 70
    cleanslop.com · measured 2026-11-03
    7/7 frames
  28. 28
    Semgrep
    Semgrep is a code security platform offering SAST, SCA, and secrets detection.
    Perf 69
    Acce 87
    Sec 45
    Priv 100
    Rel 75
    Std 89
    Disc 85
    semgrep.dev · measured 2026-10-29
    7/7 frames
  29. 29
    VibeSafe
    Security scanner for AI-generated code aimed at founders and indie developers.
    Sec 80
    Priv 25
    Rel 100
    Std 100
    Disc 90
    2 not assessed
    vibesafe.info · measured 2026-11-09
    5/7 frames
  30. 30
    Dromeas
    Dromeas is an AI-powered code quality, security, and compliance analysis platform.
    Perf 23
    Acce 97
    Sec 65
    Priv 100
    Rel 75
    Std 86
    Disc 100
    dromeas.ai · measured 2026-11-08
    7/7 frames
  31. 31
    Netherite
    Netherite is an AI security scanner that reviews code repositories for exploitable vulnerabilities.
    Perf 99
    Acce 94
    Sec 45
    Priv 0
    Rel 100
    Std 92
    Disc 100
    netherite.uz · measured 2026-11-06
    7/7 frames
  32. 32
    Netlumi
    Netlumi scans AWS, Azure, and GCP cloud accounts and code for security issues.
    Perf 92
    Acce 96
    Sec 100
    Priv 25
    Rel 67
    Std 92
    Disc 60
    app.netlumi.com · measured 2026-11-04
    7/7 frames
  33. 33
    Canopii Trust Index
    Open-source CLI for scanning MCP servers against the Canopii Trust Index.
    Perf 98
    Acce 96
    Sec 25
    Priv 25
    Rel 100
    Std 92
    Disc 87
    index.canopii.dev · measured 2026-11-03
    7/7 frames
  34. 34
    k8scan
    Kubernetes security scanner that detects misconfigurations, secrets, and RBAC flaws in Helm charts and manifes
    Perf 93
    Acce 90
    Sec 25
    Priv 25
    Rel 100
    Std 92
    Disc 100
    k8scan.com · measured 2026-11-05
    7/7 frames
  35. 35
    Krona Security
    Krona Security centralises vulnerability management across SAST, SCA, and DAST in one platform.
    Perf 37
    Acce 82
    Sec 100
    Priv 55
    Rel 75
    Std 76
    Disc 100
    kronasecurity.es · measured 2026-11-04
    7/7 frames
  36. 36
    JC-Lab AI 모의해킹
    Free external security self-check for open ports and known CVEs by JC-Lab.
    Perf 82
    Acce 96
    Sec 25
    Priv 25
    Rel 100
    Std 89
    Disc 100
    aipentest.jclab.kr · measured 2026-10-28
    7/7 frames
  37. 37
    blog.codacy.com
    Codacy offers code quality, security, and AI guardrail tools for development teams.
    Perf 60
    Acce 84
    Sec 85
    Priv 25
    Rel 100
    Std 89
    Disc 70
    blog.codacy.com · measured 2026-11-05
    7/7 frames
  38. 38
    OpenTrustBench
    Free, local security scanner that grades AI agents and MCP servers A–F.
    Perf 90
    Acce 92
    Sec 25
    Priv 25
    Rel 92
    Std 85
    Disc 100
    opentrustbench.com · measured 2026-10-28
    7/7 frames
  39. 39
    GHScan
    Free security scanner: 152+ secret patterns, dependency vulnerabilities, source map leaks, and homoglyph detec
    Perf 100
    Acce 100
    Sec 45
    Priv 25
    Rel 92
    Std 92
    Disc 47
    ghscan.vercel.app · measured 2026-10-30
    7/7 frames
  40. 40
    hexstrike-ai
    HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomousl
    Perf 42
    Acce 96
    Sec 100
    Priv 25
    Rel 75
    Std 97
    Disc 70
    hexstrike.com · measured 2026-11-03
    7/7 frames
  41. 41
    Kennel
    On-demand container image security scanning with SBOM generation and vulnerability checks.
    Perf 76
    Acce 100
    Sec 25
    Priv 70
    Rel 100
    Std 100
    Disc 35
    kennel.blueshoe.io · measured 2026-10-27
    7/7 frames
  42. 42
    KubeSentry
    A one-time-purchase Kubernetes security monitor built on Falco, self-hosted in your cluster.
    Perf 99
    Acce 94
    Sec 45
    Priv 25
    Rel 67
    Std 92
    Disc 85
    kubesentry.io · measured 2026-11-03
    7/7 frames
  43. 43
    BestDefense.io
    Automated security platform that finds, fixes, and verifies vulnerabilities on every deploy.
    Perf 71
    Acce 94
    Sec 45
    Priv 0
    Rel 100
    Std 89
    Disc 100
    bestdefense.io · measured 2026-10-30
    7/7 frames
  44. 44
    Guile
    Guile provides autonomous, always-on penetration testing across your entire stack.
    Sec 65
    Priv 25
    Rel 100
    Std 75
    Disc 85
    2 not assessed
    guile.in · measured 2026-11-10
    5/7 frames
  45. 45
    VulnClaw
    VulnClaw is an open-source, AI-driven penetration testing CLI tool for Python 3.10+.
    Perf 69
    Acce 85
    Sec 45
    Priv 25
    Rel 80
    Std 89
    Disc 75
    unclecheng-li.github.io · measured 2026-11-01
    7/7 frames
What this does not say
This ranks how production-ready each product's public surface is — not how well it does its job. For vulnerability scanner, that means it does not measure the quality of the work itself. Products whose sites block automated readers are left out rather than ranked last — we did not measure them, and bottom placement would claim something we never observed. Scores are floors: anything set at a CDN, a proxy or behind a login is invisible from the public surface.

All measured categories → · Browse the directory →