Specula alternatives

Curated alternatives to Specula — and why you'd switch.

Autonomous bug-bounty agent for the terminal — recon, 20 vuln classes, a validation gate and submission-ready HackerOne/Bugcrowd reports. Runs as a Claude Code plugin or standalone on free providers.

Why switchBoth point an agent at a codebase to hunt bugs autonomously. claude-bug-bounty hunts exploitable vulns for bounty reports; Specula hunts concurrency and protocol bugs via TLA+ model checking.

Full comparison →