Whitespace.
See who already built your idea — and the space they left open.

CLUSTER SCANNER-SECURITY-VULNERABILITIES · 10 ENTRIES · EARLIEST ENTRY 2026-08-30

repository security scanning tools

This cluster consists of security scanners that analyze code repositories for vulnerabilities, secrets, and compliance issues across code and infrastructure. The cluster's dated history is too thin to read a shape from, as only three dated entries exist before the index start, fewer than the threshold of five. Among traction leaders, vibe-audit leads with 67 stars, followed by domain-security-scanner with 1 star and cvedeck with 0 stars.

Entry timeline

ENTRY TIMELINE

JUN 2026: 1AUG 2026: 2SEP 2026: 4OCT 2026: 3
JUN 2026OCT 2026

Each bar is the month a member carries, which is a creation date where the source published one and a crawl date otherwise. Nothing in the index was found before 11 August 2026, and coverage broadened sharply on 14–15 August, so a bar from then on reports how much we found that month, not how much was built; an earlier bar reports how far back a member's own source dated it — not how long we have been watching.

Members by activity

Activity signals, not revenue.

Build origin · 1 ai-built · 9 unlabelled

Operator · 1 hobby · 2 commercial · 7 unlabelled

Two labels per entry, never collapsed into one: how it was built, and who stands behind it. Counted over the 10 listed below. Unlabelled means nothing has decided yet — not that the answer is small.

  1. 01open-aegis13★9 daysliveSelf-hosted security validation workspace that manages assets, scopes, evidence, approvals, and independent retests.
  2. 02cvedeck0★12 dayslivecommercialAgentless CVE scanner and fleet remediation tool for Linux hosts over SSH, ranking findings by exploit likelihood.
  3. 03vibe-scanner1★8 days—ai-builtSecurity scanner that detects employee-built applications across hosting platforms and flags missing logins and exposed secrets.
  4. 04tamandua1★10 daysliveSelf-hosted security scanner for small teams that finds vulnerabilities in code and dependencies, prioritizes them, suggests fixes, verifies remediation, and provides audit evidence.
  5. 05merlon3★25 days—commercialSelf-hosted attack surface scanner that runs dozens of detection engines, re-tests findings, and triages results locally for bug bounty and Hack The Box work.
  6. 06cerberus-selfhost0★18 dayslivehobbySelf-hosted website security scanner that audits HTTPS, headers, exposed files, and email authentication, and reports performance scores.
  7. 07Trivy-GUI0★7 days—Self-hosted web interface for security teams that scans container imagesand Git reposfor vulnerabilities, secrets,and misconfigurations.
  8. 08repo-risk-scanner0★1 mo—Self-hosted security scanner that analyzes repositories for vulnerabilities, secrets, and compliance issues across code and infrastructure.
  9. 09Ai-security-0★24 days—Security auditing platform that scans source code for vulnerabilities, secrets, and dependencies and generates remediation guidance.
  10. 10OpalOPC0★unknownliveSecurity scanner that inspects OPC UA industrial control servers for vulnerabilities and misconfigurations and helps fix them.

Ranked by traction, highest first, and paged 20 at a time — this is a window on the cluster, never the whole of it. Ties are broken by a stable id so a product cannot appear on two pages or fall between them. Browse every cluster.