Nikto
Nikto: A focused, configurable scanner for local web server security checks. Ranked #28 of 34 in Vulnerability Scanning Software by our editors (6.1/10); pricing: Open source; best for open-source web server checks.
At a glance
- Editor score6.1 / 10
- PricingOpen source
- Best forOpen-source web server checks
- Paid fromFree
- Deployment modelOn_premises
- Facts checked21 Sep 2026
Where it wins
- Plugin-based checks with updateable scan databases
- Authentication, SSL, proxy support, and scan tuning
- Exports reports to CSV, JSON, HTML, SQL, text, and XML
Where it doesn't
- Focused on web servers and host URLs
- No continuous scanning or integrations
- Database files have separate licensing terms
Our verdict on Nikto
Nikto is an open-source web server scanner for security professionals and system administrators. It examines web servers for potentially dangerous files and programs, outdated components, configuration issues, insecure software, and other possible vulnerabilities. The tool can identify installed web servers and software, supports host authentication, and runs locally through Perl or Docker. Windows, Linux, and self-hosted deployments are supported, making Nikto a fit for teams that want command-line scanning under their own control rather than a hosted service.
Its strongest area is configurable web server assessment. Plugin-based scanning and updateable scan databases support checks that can be tuned by category, including XSS, SQL injection, file upload, and command execution. Nikto also supports SSL, proxies, attack-encoding options, and server and software identification. Results can be exported to CSV, JSON, HTML, SQL, text, and XML, which gives security teams several ways to retain or process findings. Docker image and Dockerfile deployment add another deployment option for environments that already use containers.
Nikto is a narrower choice than a vulnerability platform built for continuous monitoring across broader infrastructure. Its supported targets are web servers and host URLs, and it does not provide continuous scanning or integrations. That makes it suitable for targeted, locally managed web server checks, configuration review, and repeatable scans tuned to specific categories. Teams seeking an open-source scanner with authentication and flexible reporting should consider it; teams needing ongoing coverage, connected workflows, or a wider range of targets should choose a broader alternative. Nikto is distributed as GPL free software, while its database files have separate licensing terms.
Your product? Our editors can test Nikto in depth and publish a review, labelled as paid · from $149/mo →
Nikto pricing
Nikto fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Free |
| Deployment model | On_premises |
| Supported targets | web servers; host URLs |
| Authenticated scanning | Yes |
| Continuous scanning | Not verified |
| Asset limit | Not verified |
| Compliance frameworks | Not verified |
| Deployment | Self-hosted |
| Platforms | Windows, Linux |
| Support | Docs |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Open source |
| Website | github.com |
| Facts checked | 21 Sep 2026 |
Alternatives to Nikto
- VorninBroad cloud vulnerability coverage with a free tier for up to five assets.9.4
- IntruderBroad vulnerability coverage with a free tier and expansion paths for larger environments.9.3
- OpenVASA broad open-source scanner with authenticated testing, continuous scans and compliance features.9.0
Used Nikto? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Nikto for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Nikto is listed in our Vulnerability Scanning Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/nikto/"><img src="https://www.itechguides.com/best/badge/nikto.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update