Nikto VS Detectify

• Open Source
  Nikto is open-source software, allowing for transparency, community contributions, and free usage, which reduces costs associated with web vulnerability scanning.
• Comprehensive Testing
  Nikto is capable of testing for over 6,400 potentially dangerous files and programs, as well as outdated versions of servers, and version-specific insecure files/programs, providing a wide scope of security checks.
• Regular Updates
  Nikto's database is regularly updated with the latest vulnerabilities and security threats, ensuring that scans are up-to-date with the most recent security findings.
• Customization
  Users can customize the scans to match their specific needs by setting various options and parameters, allowing for flexibility in the security testing process.
• Integration Capability
  Nikto can integrate with other security tools and platforms, enabling a more comprehensive security strategy and allowing it to be part of a broader security testing ecosystem.

Possible disadvantages

• False Positives
  Nikto can produce a significant number of false positives, which can lead to spending additional time and resources verifying the results.
• Performance Overhead
  Being a thorough scanner, Nikto can consume significant resources and time, especially when scanning large websites or multiple targets, which might impact system performance.
• Lack of Advanced Reporting
  Nikto's reporting capabilities are relatively basic compared to other commercial tools, which can make it challenging to analyze results and create comprehensive reports for non-technical stakeholders.
• Limited User Interface
  Nikto primarily relies on command-line interface interactions, which may not be user-friendly for all users, especially those who are not comfortable with command-line operations.
• Not Stealthy
  Nikto scans are not designed to be stealthy, meaning they can be easily detected by intrusion detection systems (IDS), which might raise alarms and potentially block the scans.

• Comprehensive Security Analysis
  Detectify offers a wide range of security scanning features that allow users to identify vulnerabilities in their web applications thoroughly.
• Automated Scanning
  Detectify automates the vulnerability scanning process, reducing the need for manual intervention and allowing for more efficient security management.
• Regular Updates
  The platform is continuously updated with the latest security vulnerabilities, ensuring that users are protected against emerging threats.
• Easy Integration
  Detectify can be easily integrated into existing workflows and tools, which makes it convenient for teams to incorporate it into their development pipelines.
• User-friendly Interface
  The platform is designed with a user-friendly interface that makes it accessible for users with varying levels of technical expertise.
• Detailed Reports
  Detectify provides detailed reports on vulnerabilities that include descriptions, risk levels, and remediation steps to help users address issues efficiently.

Possible disadvantages

• Cost
  For small businesses or individual developers, the cost of using Detectify may be prohibitive compared to other tools available on the market.
• Limited Customization
  Although Detectify provides comprehensive scanning features, some users may find the customization options for scanning and reporting to be limited.
• False Positives
  As with many automated scanning tools, Detectify may produce false positives, which can require additional time and resources to verify and resolve.
• Depends on External Knowledge Base
  Detectify relies on its external database for identifying vulnerabilities. This means any delays or issues in updates might impact the timely identification of new threats.
• Network Scan Limitations
  Detectify focuses primarily on web application security, which may not fully address network-level vulnerabilities or provide holistic infrastructure security.

No analysis of Detectify yet.

*NEW* Nikto Operator Bundle | Modern Warfare

More videos

Detectify Crowdsource | Meet the Hacker-Gerben Janssen van Doorn

More videos

• Awesome Penetration Testing

  Nikto - Noisy but fast black box web server and web application vulnerability scanner. - Source: dev.to / almost 5 years ago

• What are the actual security implications of port forwarding?

  Detectify once made an offer of making free scans which I took them up on. There are plenty of free Content Security Policy (CSP) and other vulnerability checkers around such as Observatory or Pentest. Shields UP!! Will identify which... Source: almost 3 years ago

• Ask HN: Who is hiring? (February 2022)

  Detectify | Community Manager, Crowdsource | REMOTE (Offices in Boston, US & Stockholm, Sweden. We help with relocation if wanted) https://detectify.com/ We are a cyber security company in the industry, and more specifically the EASM... - Source: Hacker News / over 4 years ago

• DAST in Gitlab

  A concept-level idea would be this: 1) For your staging/UAT environment pipeline stages, add a "DAST scan" step, eg. With Detectify (which also has an API accommodating this need) 2) I'd assume, independently from the DAST scan, you... Source: about 5 years ago

View more