vuls

Why we included this project

Patching Linux and FreeBSD servers by hand to avoid downtime means someone has to keep watching for new CVEs across every installed package, and that gets old fast on a large fleet. Vuls is an agent-less scanner written in Go that connects to target machines over SSH or runs locally, checks installed software against NVD, OVAL, and vendor advisories, and reports which hosts are affected. It covers containers, WordPress, programming-language libraries, and network devices as well as OS packages, and it can flag a server whose kernel was updated but never rebooted. Since nothing needs to be installed on the targets, one central scanner can reach many machines. Scheduled reports through cron or the server mode make it easy to run vulnerability checks on a regular schedule instead of as a one-off audit.