Open source vulnerability-scanner projects
Every project in the registry tagged vulnerability-scanner, ranked by real GitHub adoption.
Advanced vulnerability detection and management platform
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
A Security Tool for Bug Bounty, Pentest and Red Teaming.
A fast tool to scan CRLF vulnerability written in Go
cwe_checker finds vulnerable patterns in binary executables
A modular vulnerability scanner with automatic report generation capabilities.
🧹 Cleaning up images from Kubernetes nodes
AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.
🛡⚔️AI-Powered Penetration Testing Framework with automated vulnerability scanning, multi-agent system, and compliance reporting🛡⚔️
Related tags
Frequently asked questions
How many open source vulnerability-scanner projects are there?
This registry tracks 9 projects tagged vulnerability-scanner, with 54,185 GitHub stars between them. The most-adopted is ProjectDiscovery at 32,543 stars.
Are these vulnerability-scanner projects free to use?
Yes — 9 of the 9 carry an explicit open-source licence across 4 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which vulnerability-scanner project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these vulnerability-scanner projects still maintained?
9 of the 9 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.