Skip to content

Add Website Vulnerability Scanner (AI-stack exposure checks) to AI Security - #13

Closed
RanaKhan77 wants to merge 1 commit into
skyvanguard:mainfrom
RanaKhan77:add-website-vulnerability-scanner
Closed

RanaKhan77 wants to merge 1 commit into
skyvanguard:mainfrom
RanaKhan77:add-website-vulnerability-scanner

Conversation

@RanaKhan77

Copy link
Copy Markdown

Adds Website Vulnerability Scanner to the AI Security (Securing AI Systems) section.

Why it fits this section — its scanner fleet includes dedicated AI-surface checks:

  • MCP server auditing: exposed MCP endpoints, tool/permission disclosure
  • LLM gateway & agent-panel detection: exposed admin panels, model-serving ports, vector-DB dashboards
  • OWASP LLM Top-10 mapping with CVSS-scored, evidence-backed findings
  • Plus 190+ further deterministic web-security modules (SQLi, XSS, SSRF, subdomain takeover, WordPress/CMS, secrets, TLS/headers)

Engineering notes: PHP 8.2 / Laravel 12, MIT license, one-command Docker install, zero AI/API keys anywhere in the stack — the engine is fully deterministic by design (false-positive guards, soft-404 baselining, ownership gating). Weekly syncs from the production platform that runs it.

Placed as the first row after AI-Infra-Guard (both scan AI infrastructure); happy to move it wherever fits best.

@skyvanguard

Copy link
Copy Markdown
Owner

Thanks for the PR! Unfortunately this doesn't fit the list's criteria: CONTRIBUTING.md requires tools to use AI/ML meaningfully, and the scanner is deterministic by design ("Zero AI"). It's also a general-purpose web scanner rather than a tool focused on securing AI systems. Thanks for understanding.

skyvanguard added a commit that referenced this pull request Oct 18, 2026
CONTRIBUTING.md requires meaningful AI/ML use, and PR #13 was closed for
that reason. Neither the README nor the code of these 18 tools has any LLM
or ML integration, and several rows claimed AI features that do not exist
(Wazuh, Sigma, Caldera, AFL++, Ghostwriter):

Mantis, awesome-bugbounty-tools, Sn1per, Social-Engineer-Toolkit, Caldera,
Wazuh, Sigma, Falco, Ghostwriter, AFL++, APTRS, Sherlock, GHunt,
theHarvester, Recon-ng, SpiderFoot, AutoSploit and BigBountyRecon.

Redcells is removed too: it links to a commercial site and its repo
(awdemos/redcell) has no license.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants