Skip to content

WebVigil 1.0.0

Choose a tag to compare

View all tags
@ryanvmorais ryanvmorais released this 08 Oct 04:17
· 41 commits to main since this release
v1.0.0
d12d822
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First release of WebVigil: an open-source web application vulnerability scanner (DAST) for developers.

  • Safe Mode by default (passive, production-safe); Active Mode behind --mode active --authorized-by.
  • 50 checks (27 passive, 23 active), every active finding confirmed against a per-request baseline.
  • Reports in JSON (with a schema_version), SARIF 2.1.0, HTML and Markdown; --fail-on for CI.
  • Install: pipx install webvigil, or docker run --rm ghcr.io/ryanvmorais/webvigil scan <url>.

Scan only systems you own or have permission to test. What WebVigil does not do is in the
README's "Scope and limitations"; the compatibility promise is in docs/stability.md.

Full list of what is in 1.0.0: CHANGELOG

Assets 2
Loading