sqlmap alternatives: 8 open-source security testing tools
Metrics as of , from the GitHub or GitLab API of each repository. Refreshed monthly.
About sqlmap
sqlmap is a listed security testing tool: Command-line penetration testing tool that detects and exploits SQL injection flaws in database-backed applications.
Order: Listed tools in the same category, with tools in the same primary language (GitHub API) first, then by GitHub stars. Each line gives one fact from the tool's own documentation where it differs from what sqlmap's documentation states, with its source.
8 alternatives to sqlmap
garak: Scan targets: LLMs and dialog systems reached through generators. source: README
Bandit: Scan targets: Python code, for common security issues. source: README
OWASP Nettacker: Scan targets: IPv4 addresses, IP ranges, CIDR blocks, domain names and HTTP/HTTPS URLs. source: README
RESTler: Scan targets: Cloud services through their REST APIs. source: README
Atheris: Scan targets: Python code and native extensions written for CPython. source: README
Trivy: Scan targets: Container images, filesystems, remote Git repositories, virtual machine images, Kubernetes. source: README
Nuclei: Scan targets: Target URLs and hosts, from a single target or a list file. source: README
Gitleaks: Scan targets: Secrets such as passwords, API keys and tokens in git repositories, files and stdin. source: README
Repository metrics
| sqlmap | 38,4921 | 2026-01-0111.10 | 2026-09-201 | GPL-2.0-or-later | Python | active |
|---|---|---|---|---|---|---|
| Trivy | 38,0091 | 2026-08-141v0.74.0 | 2026-09-221 | Apache-2.0 | Go | active |
| Nuclei | 31,4311 | 2026-08-081v3.11.1 | 2026-09-221 | MIT | Go | active |
| Gitleaks | 29,4281 | 2026-03-211v8.30.1 | 2026-07-221 | MIT | Go | active |
| garak | 9,3301 | 2026-09-091v0.17.0 | 2026-09-161 | Apache-2.0 | Python | active |
| Bandit | 8,2781 | 2026-02-2511.9.4 | 2026-09-211 | Apache-2.0 | Python | active |
| OWASP Nettacker | 5,6121 | 2026-08-2410.4.1 | 2026-09-221 | Apache-2.0 | Python | active |
| RESTler | 2,9461 | 2025-01-301v9.3.1 | 2026-02-131 | MIT | Python | slow |
| Atheris | 1,6781 | 2025-11-2513.0.0 | 2026-06-171 | Apache-2.0 | Python | slow |
1 Fetched from the GitHub or GitLab API on . Hover a value for its own date.