Open source security-scanner projects
Every project in the registry tagged security-scanner, ranked by real GitHub adoption.
Advanced vulnerability detection and management platform
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentles
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Bu
cwe_checker finds vulnerable patterns in binary executables
A modular vulnerability scanner with automatic report generation capabilities.
PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
Related tags
Frequently asked questions
How many open source security-scanner projects are there?
This registry tracks 9 projects tagged security-scanner, with 97,779 GitHub stars between them. The most-adopted is ProjectDiscovery at 32,543 stars.
Are these security-scanner projects free to use?
Yes — 9 of the 9 carry an explicit open-source licence across 6 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which security-scanner project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these security-scanner projects still maintained?
8 of the 9 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.