Tools
osv.dev
google/osv.dev
OSV is an open vulnerability database and triage service that aggregates advisories across package ecosystems, offering a public API, data dumps and web UI, with a companion scanner for checking project dependencies.
Topics
Related projects
trivy39.3kA comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM issues across container images, filesystems, repositories, Kubernetes, and clouds.
faraday6.8kFaraday is an open-source vulnerability management platform that aggregates and normalizes results from many scanners, adding multiuser collaboration, visualization, and reporting.
django-DefectDojo5.2kDefectDojo is an open-source vulnerability management and ASPM platform. It ingests findings from many security scanners, then handles deduplication, tracking, remediation and reporting through a self-hosted web interface.
vulscan3.8kVulscan is an Nmap NSE module that turns version detection into vulnerability identification by matching services against bundled offline vulnerability databases.
Web-Cache-Vulnerability-Scanner1.2kA Go CLI scanner that tests web applications for cache poisoning and cache deception using multiple techniques, crawling, proxy support, and JSON reporting.
packj695Supply-chain security scanner that flags malicious and risky open-source dependencies via static and dynamic analysis.