Vulnerability Scanning

It disassembles and decompiles compiled programs so a person can read them.

It lists the known security holes in a project's parts and in packaged programs.

It searches a Git repository, including its whole history, for passwords and keys that were committed by mistake.

Finds passwords and keys in a code history and checks which of them still work.

It makes a browser do a small piece of work before a page is served, which most scrapers will not pay for.

It reads a machine's own log files, decides who is attacking, blocks them, and shares what it found with everyone else running it.

It lists published security holes found in a container image, a folder, or a parts list of software.

Scans Linux machines over SSH for installed software with publicly reported security holes.

Lists the packages inside a container image or a folder, as a standard bill of materials.

It reads GitHub Actions files and reports the security mistakes in them.

Checks a Python project's packages against the public advisory database and names the ones with known security holes.

Finds keys left in code, then checks which of them still work.

Writes a standard list of every package inside a project or a container image, in both of the common formats.