Open Source Vulnerability Scanning Tools using Java

A curated collection of the best open source scanners that find known weaknesses in code, dependencies, containers, and running hosts, then rank and track them until they are fixed. using Java.

Advanced vulnerability detection and management platform

Monitor infrastructure for exploitable vulnerabilities with real-time detection, automated workflows, and zero false positives.

Open Source Alternative to:

Open-source code security engine for developers

Opengrep is a community-driven fork of SemgrepCE, providing accessible static code analysis and security scanning for developers.

Windshift

Self-hosted work management and Jira alternative with boards, milestones, portals, time tracking, and test management.