| Type |
CLI/API-first scanner |
GUI-based intercepting proxy |
| Detection |
4-stage reasoning pipeline |
Traditional spider + passive/active scan |
| Deployment |
CLI, API server, Docker |
GUI, headless CLI, Docker |
| License |
Apache 2.0 |
Apache 2.0 |
| Language |
Python |
Java |
| Plugin System |
Python decorator plugins |
Java add-ons (marketplace) |
| Operator Profiles |
Internal, Bounty, Gov, Custom |
None |
| Rate Limiting |
Token-bucket, configurable |
None built-in |
| Intercepting Proxy |
No |
Yes (core feature) |
| WebSocket |
Endpoint detection + test messages |
Full proxy interception |
| GraphQL |
Introspection + batch testing |
Via add-on |
| AI/ML |
Optional LLM + DBSCAN |
None |
| CI/CD |
SARIF, API-first, Docker |
CLI Docker, API |
| Startup Time |
<1s |
5-15s (JVM) |
| Memory (baseline) |
~78 MB |
~300 MB |
