Best open-source vulnerability management tools
Open-source vulnerability management tools you can self-host and inspect. A neutral list of the open-source vulnerability management options in our directory, compared on capabilities, deployment, and sources. We do not crown a single winner; tools are listed alphabetically.
What this shortlist looks at
Tools listed here
Greenbone OpenVAS
Security teams wanting a free, open-source vulnerability scanner with no licensing costs and full customization controlThe most widely used open-source vulnerability scanner with 100,000+ network vulnerability tests
The most widely used open-source vulnerability scanner with 100,000+ network vulnerability tests
Nuclei
Security teams and researchers wanting a fast, customizable, template-driven vulnerability scanner for web and infrastructure testingFast, template-based open-source vulnerability scanner with 8,000+ community-contributed detection templates
Fast, template-based open-source vulnerability scanner with 8,000+ community-contributed detection templates
Trivy
DevOps and platform engineering teams that need a fast, open-source vulnerability scanner for containers and Kubernetes environments with zero configuration overheadOpen-source vulnerability scanner for containers, file systems, IaC, and Kubernetes with zero-config setup
Open-source vulnerability scanner for containers, file systems, IaC, and Kubernetes with zero-config setup