The top open-source alternatives to INE
are Damn Vulnerable Web Application.
One of the criteria for ordering this list is the number of mentions that products have on reliable external sources.
You can suggest additional sources through the form here.