Topics / #vulnerability-scanners

Vulnerability-scanners projects on GitHub

Scanners that detect vulnerabilities in containers, code, and dependencies.

As of , the most-starred Vulnerability-scanners projects on GitHub are trivy (38.5K stars), promptfoo (26.1K stars) and lynis (16.5K stars). GitHub.Locker tracks 5 Vulnerability-scanners repositories with 94.7K stars combined. The fastest-growing on October 18 was ARTEX, with +45 stars in a day.

5Projects
94.7KStars in total
+100Stars in a day
Browse in the catalog →github.com/topics/vulnerability-scanners ↗

Hot right now

Most stars gained in a day · Oct 18

+45

ARTEX

trhhubsd/ARTEX · ★ 1.3K

ARTEX is an AI-driven autonomous penetration testing system (Go backend + Next.js frontend) where LLM-powered planner and worker agents explore targets, map assets, and find vulnerabilities on their own.

+31

promptfoo

promptfoo/promptfoo · ★ 26.1K

promptfoo is a CLI and library for evaluating and red-teaming LLM apps — you test prompts, agents, and RAGs and run security scans on them, instead of relying on trial-and-error.

+16

trivy

aquasecurity/trivy · ★ 38.5K

Trivy is an all-in-one security scanner that finds vulnerabilities, misconfigurations, secrets, and software licenses across container images, filesystems, git repositories, VM images, and Kubernetes clusters.

+6

lynis

CISOfy/lynis · ★ 16.5K

Lynis is a security auditing and hardening tool for Linux, macOS, BSD, and other Unix-like systems. It scans the host it runs on for vulnerable software, misconfigurations, and weak settings, and gives hardening tips while also assisting with compliance testing (HIPAA, ISO27001, PCI DSS).

The all-time top

5 projects · by stars

  1. #1 · aquasecurity/trivy

    trivy

    Trivy is an all-in-one security scanner that finds vulnerabilities, misconfigurations, secrets, and software licenses across container images, filesystems, git repositories, VM images, and Kubernetes clusters.

    38.5K
  2. #2 · promptfoo/promptfoo

    promptfoo

    promptfoo is a CLI and library for evaluating and red-teaming LLM apps — you test prompts, agents, and RAGs and run security scans on them, instead of relying on trial-and-error.

    26.1K
  3. #3 · CISOfy/lynis

    lynis

    Lynis is a security auditing and hardening tool for Linux, macOS, BSD, and other Unix-like systems. It scans the host it runs on for vulnerable software, misconfigurations, and weak settings, and gives hardening tips while also assisting with compliance testing (HIPAA, ISO27001, PCI DSS).

    16.5K
  1. 4

    vuls

    12.3Kfuture-architect/vuls · Go

    Vuls is an open-source, agent-less vulnerability scanner written in Go. It automatically detects vulnerabilities affecting your servers and can generate reports on a regular basis, for example via CRON.

  2. 5

    ARTEX

    1.3Ktrhhubsd/ARTEX · Go

    ARTEX is an AI-driven autonomous penetration testing system (Go backend + Next.js frontend) where LLM-powered planner and worker agents explore targets, map assets, and find vulnerabilities on their own.

Often tagged together