Free, open-source web security scanner with an AI advisor that explains how to fix each finding. Scheduled scans, CI/CD, SARIF — self-hostable.

Free, open-source web security scanner with an AI advisor that explains how to fix each finding. Scheduled scans, CI/CD, SARIF — self-hostable.
BugBounty Arsenal — Free Open-Source Web Security Scanner You need to enable JavaScript to run this app. BugBounty Arsenal — free, open-source web security scanner BugBounty Arsenal is a free, open-source web application security scanner for bug bounty hunters and small teams. It runs 53 detectors across reconnaissance, injection, SSRF, XSS, authentication and more, then an AI advisor explains how to fix each finding — and, for authorized testing, how to reproduce it. Includes scheduled scans that alert only on new findings, CI/CD gating with a GitHub Action and CLI, SARIF export for GitHub Co
Free, open-source web security scanner with an AI advisor that explains how to fix each finding. Scheduled scans, CI/CD, SARIF — self-hostable.
BugBounty Arsenal — Free Open-Source Web Security Scanner You need to enable JavaScript to run this app. BugBounty Arsenal — free, open-source web security scanner BugBounty Arsenal is a free, open-source web application security scanner for bug bounty hunters and small teams. It runs 53 detectors across reconnaissance, injection, SSRF, XSS, authentication and more, then an AI advisor explains how to fix each finding — and, for authorized testing, how to reproduce it. Includes scheduled scans that alert only on new findings, CI/CD gating with a GitHub Action and CLI, SARIF export for GitHub Co