VulnOps
The operator console Vulners never shipped — orchestrated CVE scanning, end to end.
Live console — interactive · mock data · no scanning
The actual VulnOps dashboard, wired to canned data so you can drive it. Navigate the rail(Operations · Scans · Findings · Hosts · Agents · Reports), switch the telemetry views, then hitLaunch scan and open the console to watch a sweep stream in. Loads only when you scroll here.
- critical514
- high1,194
- medium536
- low54
- CVE-2019-1014912
- CVE-2020-193811
- CVE-2021-2301710
- CVE-2021-404389
- CVE-2018-10021058
- CVE-2019-10030297
- CVE-2019-101646
- http1,348
- ssh1,085
- https338
- tcpwrapped215
- http-proxy111
- https-alt92
- smtp61
- Northwind — External Domain Discovery / sweep10.0PDFXLS
- Northwind — External Scan: IPs / ConfigurationPDFXLS
- Weekly Vulnerability Assessment → 203.0.113.52PDFXLS
- Weekly Vulnerability Assessment → 203.0.113.44PDFXLS
- Vantage Health — Authorized DMZ discoveryPDFXLS
- demo-workspace — CI/CD exposurequeued
// a sandbox, not a live engagement.This demo runs on canned data — no nmap, no Vulners API, no agents, no real hosts. Every client is fictional and every address is TEST-NET (203.0.113.0/24). The real VulnOps drives nmap discovery and the Vulners NSE against authorized scope for genuine CVE/CVSS correlation, then reports it. This shows the flow and the feel; the real thing does the work.
The gap it fills
Vulners is a powerful CVE database, but it ships as an API and an nmap NSE script — there's no console, no scan orchestration, no reporting. VulnOps is the full GUI and management layer that doesn't otherwise exist for it.
The scan engine
nmap handles discovery and service fingerprinting; the Vulners NSE correlates services to CVEs and CVSS; results are parsed into PostgreSQL. Operators never touch raw nmap arguments — the scanner is driven entirely through typed, validated configuration.
- ▹ Structured scan profiles: technique, ports, timing and scripts are typed fields validated against an allow-list, so the scanner can't be turned into a command-injection surface.
- ▹ Scheduling & chaining: cron and one-shot schedules with a calendar preview; discovery scans auto-create host groups and queue follow-up vulnerability scans for approval.
- ▹ Campaign rollups combine a discovery sweep and all its follow-up scans into one report.
Remote agents, poll-only by design
Scanner agents for Linux, macOS, and Windows (with a WinForms install wizard) poll for work — nothing listens on the client host. Agents re-validate every instruction independently and self-uninstall on retirement. The Windows installer even bundles and version-manages nmap and the Vulners scripts.
Engagements, auth & reporting
Scope scans, groups, schedules and agents per client with authorization windows. Auth is GitHub OAuth (org-gated, fail-closed) plus bcrypt operator login and revocable, IP-bindable API keys for machine clients. Reports render as polished PDF and multi-sheet XLSX, including campaign rollups that fold a discovery sweep and all its follow-up scans into one document.
Honest scope
VulnOps does unauthenticated, network-based CVE correlation — fast and safe, ideal for 'what's exposed and does it match a known CVE.' It is not an authenticated deep scanner like Nessus, and it doesn't pretend to be.