FlawFix - Vulnerability Management

Manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Documentation made easy, Compliance to security Frameworks
Explore the docs »

Report Bug · Request Feature

Table of Contents

1. About The Project
   • Built With
2. Getting Started
3. Usage
4. Roadmap
5. Contributing
6. Code of Conduct
7. License

About The Project

FlawFix is a vulnerability management that fits perfectly into any IT environment and ensures mitigation of vulnerabilities and complete documentation of the handling processes. It aims to be compliant to various security frameworks, like ISO 27001 or German BSI Grundschutz. With FlawFix you can easily go through the vulnerability management process:

1. Consolidation of vulnerabilities
2. Enhancing the data
3. Risk Assessment
4. Selection of the mitigation type
5. Sharing of the vulnerability information to responsible parties
6. Reporting

(back to top)

Built With

FlawFix is divided into two projects: A frontend (FlawFix Web) and a backend (FlawFix Backend).

Frontend (this project):

• 
• 

Backend:

• 

(back to top)

Getting Started

To get a local copy up and running follow these simple example steps.

1. Clone the repo

   git clone https://github.com/l3montree-dev/flawfix-web.git

2. Install NPM packages

   npm install

3. Start the development server

   npm run dev

(back to top)

Usage

Please refer to the Documentation

(back to top)

Roadmap

• Consolidation of vulnerabilities
• Enhancing the data
• Risk Assessment
• Selection of the mitigation type
• Sharing of the vulnerability information to responsible parties
• Reporting
• Multi-language Support
  • German
  • English

See the open issues for a full list of proposed features (and known issues).

(back to top)

Contributing

Please read our contribution guide if you would like to report a bug, ask a question, or help us with coding.

(back to top)

Code of Conduct

Help us keep FlawFix open and inclusive. Please read and follow our Code of Conduct.

(back to top)

License

Distributed under the AGPL-3.0-or-later License. See LICENSE.txt for more information.

(back to top)