Vulnerability scanners

Nebula is an AI-powered penetration testing assistant that integrates large language models (OpenAI, Llama, Mistral, DeepSeek) into a CLI interface...

OSV.dev is Google's open-source vulnerability database and triage service that aggregates security vulnerabilities across ecosystems and provides an...

Promptfoo is a CLI and library for evaluating, testing, and red-teaming LLM applications, enabling users to compare model performance across multiple...

Trivy is a comprehensive security scanner for finding vulnerabilities, misconfigurations, secrets, and software licenses across container images,...

OWASP Nettacker is a Python-based automated penetration testing and vulnerability scanning framework that helps security professionals conduct...

ScopeSentry is a distributed security scanning platform designed for asset reconnaissance, subdomain enumeration, vulnerability detection, and...

Secator is a task and workflow automation framework for security assessments that integrates dozens of well-known pentesting and OSINT tools (arjun,...

Nginx Ultimate Bad Bot Blocker is a specialized security tool that blocks malicious bots, spam referrers, vulnerability scanners, and fake crawlers...

EMBA is a specialized firmware security analysis tool designed for penetration testers, product security teams, and developers to identify...

Lynis is a security auditing tool for UNIX-based systems (Linux, macOS, BSD) that performs in-depth security scans, tests compliance (ISO27001,...

OpenVAS Scanner is a specialized vulnerability assessment engine for the Greenbone Community Edition, designed to execute continuous feeds of...

AutoPWN Suite is an automated penetration testing framework that scans networks for vulnerabilities and attempts exploitation using nmap, version...

Trivy Operator is a Kubernetes-native security toolkit that automatically scans clusters for vulnerabilities, misconfigurations, exposed secrets, and...

Faraday is an open-source vulnerability management platform designed to centralize, aggregate, and normalize security scan data from multiple tools...

npq is a command-line tool that audits npm packages before installation by checking against CVE databases, analyzing package metadata (age,...

Scanners Box is a curated collection of 9,000+ open-source cybersecurity tools organized across 10+ categories, including AI-driven security agents,...

Vuls is an agent-less vulnerability scanner written in Go that detects security vulnerabilities across Linux, FreeBSD, Windows, macOS, containers,...

Safety is a Python dependency vulnerability scanner that detects known security vulnerabilities and malicious packages across development, CI/CD, and...

tfsec is a static analysis security scanner for Terraform infrastructure-as-code that detects misconfigurations across cloud providers (AWS, Azure,...

ThreatMapper is an open-source Cloud Native Application Protection Platform (CNAPP) that detects threats, vulnerabilities, and security...