# Nuclei alternatives: what AI models name instead, November 2026

Gane Index, November 2026 Edition. 231 of the 252 answers in the 1 category where Nuclei holds a standing named it neither first nor as an alternative; these are the first choices those answers made. Page: https://www.gane.ai/index/it/vendors/nuclei/alternatives

## Named instead, most often (every category and segment added)

- Invicti: 63
- OWASP ZAP: 47
- StackHawk: 16
- Acunetix: 14
- Intruder: 11
- Burp Suite DAST: 6

## Dynamic application security testing

**Small business**: 72 of 84 answers did not name Nuclei (Nuclei is #7 of 13 at 2%).

- OWASP ZAP: first choice in 37 of those 72
- Intruder: first choice in 11 of those 72
- StackHawk: first choice in 10 of those 72
- Acunetix: first choice in 4 of those 72
- Probely: first choice in 2 of those 72
- Blacksight: first choice in 1 of those 72
- Detectify: first choice in 1 of those 72
- Escape: first choice in 1 of those 72

**Mid-market**: 75 of 84 answers did not name Nuclei (Nuclei is #12 of 13 at 0%).

- Invicti: first choice in 21 of those 75
- Acunetix: first choice in 10 of those 75
- OWASP ZAP: first choice in 10 of those 75
- StackHawk: first choice in 6 of those 75
- Burp Suite: first choice in 2 of those 75
- Escape: first choice in 2 of those 75
- Bright: first choice in 1 of those 75
- Bright Security: first choice in 1 of those 75

**Enterprise**: 84 of 84 answers did not name Nuclei.

- Invicti: first choice in 42 of those 84
- Burp Suite DAST: first choice in 6 of those 84
- Burp Suite: first choice in 3 of those 84
- Burp Suite Enterprise Edition: first choice in 2 of those 84
- Checkmarx DAST: first choice in 2 of those 84
- HCL AppScan: first choice in 2 of those 84
- ImmuniWeb Neuron: first choice in 2 of those 84
- Astra Security: first choice in 1 of those 84

Published under CC BY 4.0. The output is the models' output; nothing here is a recommendation by the index.