head to head · open source

pentagi vs osv-scanner

pentagi has 24,708 GitHub stars, 3,177 forks, 71 open issues and last shipped 9 days ago. osv-scanner has 11,049 stars, 794 forks, 113 open issues and last shipped yesterday. pentagi leads on adoption by 124% (24,708 vs 11,049 stars). pentagi is written in Go under MIT; osv-scanner is written in Go under Apache-2.0. pentagi has attracted 13% as many forks as stars, osv-scanner 7%. osv-scanner was the more recently maintained of the two, and both are self-hostable with no licence fee. The two share 1 topic tag (security-tools), so they are genuine substitutes rather than adjacent tools.

Two open source projects, one decision. Both are free and self-hostable — the differences are community size, license terms, language stack and release pace.

pentagi ★ 25K osv-scanner ★ 11K category Security & Privacy

← all 15422 open source comparisons

Side by side

pentagi osv-scanner
GitHub stars ★ 25K ★ 11K
License MIT Apache-2.0
Written in Go Go
Last push 2026-09-10 2026-09-18
Forks ⑂ 3.2K ⑂ 794
Self-hosting Yes Yes
Data ownership Your server Your server

pick pentagi if

  • You weight community size — 25K stars and counting
  • You want the MIT license terms
  • Your stack matches Go
  • You value the larger contributor base for long-term maintenance

full pentagi profile →

pick osv-scanner if

  • You want the osv-scanner feature set and don't need the biggest community
  • You prefer the Apache-2.0 license terms
  • Your stack matches Go
  • You evaluated both and osv-scanner fits your workflow better

full osv-scanner profile →

About pentagi

PentAGI is an MIT licensed, self hosted multi agent system written in Go that runs fully autonomous AI agents to perform complex penetration testing tasks inside an isolated Docker sandbox, built for information security professionals, researchers, and enthusiasts.

read the full pentagi overview →

About osv-scanner

OSV Scanner is an Apache 2.0 licensed vulnerability scanner written in Go that connects a project's list of dependencies with the vulnerabilities affecting them, using data from the open OSV.dev database, and it is aimed at developers, maintainers, and security teams who need to find known vulnerabilities in the dependencies they already ship.

read the full osv-scanner overview →

More in Security & Privacy

PayloadsAllTheThings ★ 81K Puter ★ 44K Mattermost ★ 39K Keycloak ★ 37K Tailscale ★ 37K HashiCorp Vault ★ 36K

Related comparisons

puter vs projectdiscovery mattermost vs projectdiscovery keycloak vs projectdiscovery tailscale vs projectdiscovery puter vs tracecat mattermost vs tracecat keycloak vs tracecat tailscale vs tracecat supabase vs better-auth keycloak vs jumpserver keycloak vs better-auth keycloak vs authentik jumpserver vs better-auth jumpserver vs authentik better-auth vs authentik jumpserver vs teleport puter vs mattermost mattermost vs nextcloud puter vs signal puter vs ente mattermost vs signal mattermost vs ente mattermost vs zulip signal vs ente

More Threat Detection & Response projects

Compare either of these against the rest of the Threat Detection & Response field.

pentagi vs PayloadsAllTheThings pentagi vs Anthropic-Cybersecurity-Skills pentagi vs ProjectDiscovery pentagi vs vuls pentagi vs Nettacker pentagi vs GDA-android-reversing-Tool pentagi vs afrog pentagi vs Tracecat pentagi vs airgorah pentagi vs tenzir

Frequently asked questions

Is pentagi or osv-scanner more popular?

pentagi has 24,708 GitHub stars and osv-scanner has 11,049. pentagi has the larger community by that measure.

Are pentagi and osv-scanner free?

Both are open source. pentagi is licensed under MIT and osv-scanner under Apache-2.0. Neither carries a licence fee.

What is the difference between pentagi and osv-scanner?

pentagi is written in Go and osv-scanner in Go. The practical differences are community size, licence terms, language stack and release cadence — all compared in the table above.

Which should I choose, pentagi or osv-scanner?

Choose pentagi if you want the larger community (24,708 stars) or its MIT licence terms. Choose osv-scanner if its feature set, stack or Apache-2.0 licence fits better. Both are self-hostable.