Skip to content
SPECIFICTION
Get listed

Nikto

github.com

Free plan WindowsLinuxSelf-hosted
Visit github.com
Spec score 7.8 #16 of 35 in Vulnerability Scanning Software

Spec sheet

Purpose
Nikto is an open-source web server scanner for security professionals, penetration testers, and system administrators.Read 4 Oct 2026 · cirt.net
Support
The project directs users to GitHub or Docker and its documentation for support, and asks users to open GitHub issues for bugs, feature requests, or questions.Read 4 Oct 2026 · cirt.net
Authentication
It supports Basic and NTLM host authentication and can guess credentials for Basic, NTLM, and Digest authorization realms.Read 4 Oct 2026 · cirt.net
Custom checks
Users can add custom checks through CSV files.Read 4 Oct 2026 · cirt.net
Detection
It identifies installed web servers and software using headers, content, and file analysis, and its scan items and plugins can update automatically.Read 4 Oct 2026 · cirt.net
False positives
The scanner uses headers, page content, hashing, and other methods to reduce false positives.Read 4 Oct 2026 · cirt.net
Install options
The project documents Perl installation, Docker images, and Windows installation.Read 4 Oct 2026 · github.com
License terms
Nikto 2.6 code is GPLv3, while its database files may only be distributed with and used in Nikto unless a commercial license is obtained from the author.Read 4 Oct 2026 · cirt.net
Protocols and proxies
Nikto supports IPv4, IPv6, and HTTP proxies.Read 4 Oct 2026 · cirt.net
Reporting
Scans can produce plain text, JSON, SQL, XML, HTML, or CSV reports, including direct reporting to MySQL and PostgreSQL.Read 4 Oct 2026 · cirt.net
Scan controls
Users can tune scans to include or exclude vulnerability check classes and scan multiple ports or servers, including servers listed in Nmap output.Read 4 Oct 2026 · cirt.net
Scan coverage
It checks for over 8,000 potentially dangerous or interesting files and programs and identifies outdated server versions and common misconfigurations.Read 4 Oct 2026 · cirt.net
TLS and cookies
Nikto detects TLS configuration and fingerprints, handles cookies automatically, and offers an option to disable cookie use.Read 4 Oct 2026 · cirt.net

Plans and prices

Nikto Free Free software under GPLv3 · Database files are restricted to use with Nikto; commercial use requires a license Read 4 Oct 2026 · github.com

Every Nikto plan and price →

Where Specifiction places it

Alternatives to NiktoAll alternatives →