Katana
by ProjectDiscoveryVerified
Looking for Application Security Testing software? Katana by ProjectDiscovery provides endpoint discovery for Web Discovery. Compare features and alternatives.
- Product Type
- Modern Web Crawler & Endpoint Spider
- Deployment
- Cloud
- Industries
- 3+ industries
- Regions
- Global
- Free Trial
- Yes
- Pricing
- Contact Vendor
About Katana
ProjectDiscovery Katana is a modern, next-generation web crawling and spidering framework engineered for security practitioners, bug bounty researchers, and penetration testers seeking to uncover hidden endpoints and discover comprehensive attack surfaces across modern dynamic web applications. Developed in Go, Katana combines standard headless HTTP crawling with fully automated Chromium headless browser rendering.
Key Features
4 capabilities that Katana offers.
Endpoint discovery
Dynamic JavaScript parsing
API route extraction
Use Cases
Attack Surface Management
Web Discovery
Application Security Testing
Industries Served
Katana is used across 3+ industries.
Penetration Testers
AppSec
AppSec Teams
Regions
Global
Integrations
Works with the tools teams already use
Chromium
Linux CLI
Docker
Go
Deployment Options
Flexible deployment to meet your needs
Cloud
Platform & Access
What Katana supports, at a glance.
- API accessNo
- Single sign-on (SSO)No
- Role-based access (RBAC)No
- Multi-tenantNo
- Mobile appNo
Security & Compliance
Standards, regulations, and frameworks this product aligns with.
Open Source (MIT License)
- Supported platforms
- Linux CLImacOS CLIWindows CLIDockerChromium Headless
- Operating systems
- LinuxmacOSWindowsContainer OS
- Browser support
- Not applicable (CLI Engine)
- Languages supported
- English
- Data residency
- Local / Operator Controlled
- Deployment details
- CLI; Open Source; Go; Open-source CLI binary
Katana Reviews
No reviews yet
Be the first to share your experience with Katana.
More Products from ProjectDiscovery
View all →Naabu
Evaluating Naabu? See how this Attack Surface Management tool handles JSON formatting and nmap integration, where it fits best and which alternatives to compare.
Subfinder
Subfinder is a passive subdomain enumeration tool used for Web Discovery. Highlights include fast DNS enumeration. Compare it with other Attack Surface Management tools.
Nuclei
Looking for Vulnerability Management software? Nuclei by ProjectDiscovery provides community templates for Security Testing. Compare features and alternatives.
Httpx
Evaluating Httpx? See how this Attack Surface Management tool handles HTTP header analysis and TLS probing, where it fits best and which alternatives to compare.
Nuclei Cloud
Nuclei Cloud: cloud-hosted vulnerability scans, automated scheduling and team collaboration. Built for Security Testing. Compare Vulnerability Management alternatives.
ProjectDiscovery Cloud Platform
ProjectDiscovery Cloud Platform offers external asset discovery and Continuous Nuclei scanning. Use it for Security Testing. See Attack Surface Management alternatives.
Product Resources
Explore More Products
Other cybersecurity products listed on Cybases.
Detectify
Evaluating Detectify? See how this Attack Surface Management tool handles DNS monitoring and OWASP Top 10 scanning, where it fits best and which alternatives to compare.
Application SecurityView details
Invicti Enterprise
byInvicti
Evaluating Invicti Enterprise? See how this DAST tool handles DAST scanning and Proof-Based Scanning, where it fits best and which alternatives to compare.
Application SecurityView details
Acronis GenAI Protection
byAcronis
Governs and protects employees' use of generative AI tools across clients: shadow AI visibility, sensitive data protection and harmful prompt blocking.
Shadow AI visibility and governanceSensitive data protection for AI interactions
Security ToolView details
Acronis MDR
byAcronis
24/7/365 managed threat detection, response and recovery for MSPs, delivered by Acronis or partner SOC teams.
24x7 monitoring24x7 automated mitigation
Security ToolView details