Security Scanners — find the CVEs that affect your stack
Command-line scripts that check your own WordPress, Linux, Docker or Windows for known CVEs. No agents. No data sent home. Your system, your results.
Scan plans — from €8/mo founding · reg. €12 €12/mo → see plans
The scanners collect only component names and version strings — what package, what version. No IP address, hostname, MAC address, SSH keys, database contents or file system data ever leave your machine. The scripts are open source: clone them, audit every line, then run them.
// how it works
Four steps from zero to scanning.
Each scanner is a self-contained script. No daemon, no agent, no install wizard.
Pick the scanner for your stack and clone it from GitLab or GitHub. Everything you need is in one directory.
git clone gitlab.com/valtersit/<scanner> One line in .env. A Standard or Pro API key includes scanner slots — sign up once, scan everywhere.
VALTERSIT_API_KEY=vit_xxx The script inventories the target, queries the CVE API, and outputs a ranked report. Download the HTML report free for 30 days.
./scan.sh --output report.html Add one cron line and get nightly reports automatically. Know within 24 hours when a new CVE hits your installed software.
0 2 * * * ./scan.sh --quiet // the scanners
Six tools. Your whole stack covered.
Each script targets a specific surface. All cross-reference against the same CVE database powering the API — 240,000+ vulnerabilities, updated daily.
Inventories WordPress core version, all active themes and every plugin. Checks each against known CVEs and flags the severity.
Reads installed packages from apt, yum or pacman and cross-checks every package version against the CVE database. Runs in seconds.
Scans Docker images and running containers for known CVEs in base OS packages and language-level dependencies.
Inventories installed software via PowerShell and flags known CVEs. No WMI hell, no agent install — a script you can read line by line.
Auto-imports 10,800+ high-confidence malicious IPs into pfSense, MikroTik, fail2ban or nftables. Uses the existing Standard/Pro IP feed — no scan plan needed.
⊛ Open-source & auditable. All repos are public — inspect every line before you run it. Browse: gitlab.com/valtersit · github.com/hugovalters
// scanner use cases
Who runs it and why.
Each scanner is open source. Get it, audit it, schedule it. Subscription covers unlimited scans and rescans — no per-run cost.
// scan plans
Subscribe for unlimited scans. Or pay per system.
Scan-plan pricing is here. CVE + Threat-IP API pricing →
Founding price · locked for life · ends 31 Dec 2026
1 system · unlimited scans & rescans included
Scan one system as often as needed. Reports included — download free for 30 days after each scan.
- 1 system slot
- Unlimited scans & rescans included
- HTML scan report included
- Report re-download after 30 days: €3
Founding price · locked for life · ends 31 Dec 2026
5 systems · unlimited scans & rescans included
Cover a small team or set of critical services. Reports included — download free for 30 days per scan.
- 5 system slots
- Unlimited scans & rescans included
- HTML scan report included
- Report re-download after 30 days: €3
Founding price · locked for life · ends 31 Dec 2026
25 systems · unlimited scans & rescans included
For agencies managing multiple clients or environments. Reports included.
- 25 system slots
- Unlimited scans & rescans included
- HTML scan report included
- Report re-download after 30 days: €3
| What's included | Solo | Team | Agency |
|---|---|---|---|
| System slots | 1 | 5 | 25 |
| Scans & rescans | unlimited | unlimited | unlimited |
| HTML scan report | ✓ | ✓ | ✓ |
| Report download (30 days) | free | free | free |
| Report re-download after 30 d | €3 | €3 | €3 |
| Monthly price (founding)(regular) | €8€12 | €29€44 | €89€135 |
// also on this platform