No more typing reviews! Try our Samantha, our new voice AI agent.

GitHub vs w3af comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 25, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

GitHub
Ranking in Application Security Tools
4th
Average Rating
8.8
Reviews Sentiment
6.5
Number of Reviews
102
Ranking in other categories
Version Control (2nd), Agile and DevOps Services (2nd)
w3af
Ranking in Application Security Tools
44th
Average Rating
8.0
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2026, in the Application Security Tools category, the mindshare of GitHub is 2.7%, up from 0.9% compared to the previous year. The mindshare of w3af is 0.7%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
GitHub2.7%
w3af0.7%
Other96.6%
Application Security Tools
 

Featured Reviews

Abdulmunafz Mct - PeerSpot reviewer
Full Stack Developer at Sri Krishna Arts and Science
Daily workflows have become streamlined as I manage projects, learn from clones, and host sites
The thing that has frustrated me is sometimes when I push using a Git command, I need to force the push, which is the main thing. The setup is frustrating because GitHub could add a repository with pre-installed packages or something since I need to install packages in VS Code before pushing and maintain it in the codebase. Git packages need to be installed manually, and if that was already in a GitHub repository, that would be much better. GitHub packages can be installed previously for the project upon the project requirement, and that is the thing I wanted to add here. That would be good. According to governance and security, I recently heard about some security issues in GitHub. I think that could be centralized and should consider those security issues and clear them. The AI capabilities there include Copilot or something else. I recently heard about security issues, but I do not know about it clearly. However, if security has been more tightened, it will be better.
OS
Information Security Advisor, CISO & CIO, Docutek Services at Docutek Services
It's buggy and seems to try to do too many things, but having this on a USB drive has been valuable.
I tried to install this on numerous systems and eventually, with help, I got it running. It needs far too many dependencies installed and there's too much messing about to be of much use. Once running, it's buggy and begs the question can it be relied upon? Even within Kali it reports website time-outs, yet Zap or Burp are able to do a successful scan. I wanted this to work so much and be able to use it as an additional check of my results but have now binned it.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features of GitHub are the ease of integration into Microsoft Azure DevOps, the process that you need to deploy into Microsoft Azure becomes fairly simple, and the templates are already available, so a lot of the engineers find it easier to use."
"I like the CI/CD features."
"The most valuable aspects of GitHub are version control and parallel development. I also appreciate the forking part, which allows us to release a specific set of features to the environment."
"The versioning of the code and the tracking of changes are definitely some of my top features."
"The product has a good UI, it's simple and easy to access, and technical help is easily available, while the two-factor authentication security is another valuable feature."
"The most important feature of GitHub is the maintainability of the versions of the code."
"This is a simple, easy-to-use solution that is fully compatible with Git."
"GitHub provides the SFH key to protect our passwords and our connection, it secures our repositories so any attempt to access from outside the company is blocked, and we also have control of our product versions in GitHub, which is very useful."
"The best free software for pen testing web applications."
 

Cons

"I would like to see integration with Slack such that all of the changes made in GitHub are reflected there."
"There is room for improvement in terms of interface."
"I would like to see more security where a plugin was available for us to update in relation to security."
"It is currently only from the development perspective. It doesn't have features related to project management and testing. It is not like Azure. So, there is a lot of room for improvement. It is a version control product, and it would be good if they can come up with a complete DevOps product."
"The security for this solution could be tightened up and improved."
"The initial setup and implementation could be easier, I had some difficulties with it at first but I don't have a development background."
"The stability can be improved."
"The GitHub repository needs an upgraded user interface and overall UI improvements."
"Unfortunately, once you get around the seemingly strict set of pre-requisites to install it, it is incredibly buggy."
 

Pricing and Cost Advice

"The private repositories are free, which is very good."
"Regarding pricing, I'd rate it eight out of ten. It's decent and not too expensive, and small businesses can also afford it. With AWS taking CodeCommit out of the market, I don't see many competitors for small companies in terms of GitHub."
"We are currently paying nothing for GitHub."
"The product is reasonably priced."
"We have an enterprise licensing agreement, and I am not part of the finance department so I can't say how much it costs."
"GitHub is an open-source application. It's free to use."
"It's cheaper than Bitbucket."
"My company purchased it. Before, we used to receive the free version, but then they purchased some of the features."
Information not available
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
912,788 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Outsourcing Company
11%
Marketing Services Firm
8%
Manufacturing Company
7%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business43
Midsize Enterprise14
Large Enterprise55
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for GitHub?
I have been using GitHub for free, and recently I got a free education offer, such as educational resources. I believe it is GitHub Pro or something similar. I have been using the educational offer...
What needs improvement with GitHub?
When we were using GitHub, sometimes within a month or two, GitHub is down for some time. Also, it is using SAML authentication, so when we restart our system, if there is an update on our laptop t...
What is your primary use case for GitHub?
My main use case for GitHub is as a source repository where I'm pushing our code there. Whatever the microservices or the services code we have, we are pushing there. We are running our build and s...
Ask a question
Earn 20 points
 

Comparisons

 

Overview

 

Sample Customers

Dominion Enterprises, NASA, Braintree, SAP, CyberAgent
Information Not Available
Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Application Security Tools. Updated: September 2026.
912,788 professionals have used our research since 2012.