VulnHunter is an open-source CLI tool that scans software dependencies for vulnerabilities and secrets, providing AI-powered triage to help DevSecOps teams prioritize issues. It supports offline operation, SARIF output, and SBOM integration, making it suitable for secure environments.
In the Security & compliance platforms space, VulnHunter takes a focused approach. It focuses on detecting and triaging vulnerabilities and secrets in software dependencies offline. It is built as an open-source project for devsecops engineers. VulnHunter is open source under the MIT license. The product ships for the command line.
DevGreick builds and maintains VulnHunter, and the product first shipped in 2025. Development happens publicly on GitHub with 49 commits in the last 90 days. PulseGate's similarity index finds few close equivalents — VulnHunter occupies a relatively distinct niche. Key capabilities include offline scanning, AI triage, and dependency analysis.
Latest indexed changes and source events
Other apps tracked under the same category.
