vulnrepo

Why we included this project

Security professionals who spend as much time formatting findings as finding them will appreciate a tool that turns scanner output into clean, client-side reports. VULNRΞPO runs entirely in the browser, encrypting each report before it touches storage, so nothing leaves your machine unless you deliberately set up the optional backend. It pulls findings straight from tools like Nmap, Nessus, Burp Suite, OpenVAS, and Trivy, then lets you assemble them into HTML, DOCX, or TXT documents with attachments and an automatic changelog. Built-in checklists for OWASP ASVS, PCI DSS, and The Bug Hunter's Methodology keep assessments consistent, and Jira and SARIF exports hand results off to downstream workflows. The local Ollama integration is a nice extra for drafting issue descriptions without sending data to a cloud service, but the core value is a fast, private reporting pipeline for pentests and bug bounty engagements.