The top open-source alternatives to threattrack.com ThreatAnalyzer
are w3af.
One of the criteria for ordering this list is the number of mentions that products have on reliable external sources.
You can suggest additional sources through the form here.