Skip to content

Add Website Vulnerability Scanner (self-hosted web scanning, 203 modules) - #191

Open
RanaKhan77 wants to merge 1 commit into
devsecops:masterfrom
RanaKhan77:master
Open

RanaKhan77 wants to merge 1 commit into
devsecops:masterfrom
RanaKhan77:master

Conversation

@RanaKhan77

Copy link
Copy Markdown

What tool is being added?

Website Vulnerability Scanner — an open-source (Apache-2.0), self-hostable web vulnerability scanning suite, added to the Testing section.

Why it fits DevSecOps

  • 203 deterministic scanner modules — SQLi, XSS, SSRF, SSTI, command injection, subdomain takeover, WordPress/CMS, DNS, TLS, security headers, GraphQL, race conditions, plus CI/CD pipeline exposure detection (self-hosted runners, exposed secrets).
  • Pipeline-friendly — Docker Compose runtime, CLI-first, deterministic (zero AI = zero flaky verdicts), exit codes and JSON/HTML/PDF report output for CI gates.
  • Evidence-backed findings — CVSS-scored with proof, CWE→OWASP mapping, EPSS/KEV enrichment.
  • Continuous monitoring — scheduled rescans + attack-surface diffing fit shift-left + production watch workflows.

Checklist

  • Added to the correct category (Testing)
  • Entry format matches the existing list (* [Name](url) - description)
  • Link works (repo is public and active)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant