Vulnaris
Every scanner, from source code to production, in one prioritized view
Powerful Features for Modern Security Teams
Findings from nine scanners, deduplicated, prioritized by real-world exploitation, and tracked until they're fixed
From code to production
- Gitleaks — leaked secrets
- Semgrep — insecure code
- Trivy — vulnerable dependencies
- Trivy — IaC misconfigurations
- Trivy — container images
- Kyverno — Kubernetes policy
- OWASP ZAP — web applications
- Nessus — hosts & networks
- OpenVAS — hosts & networks
Nessus Integration
Seamless integration with Tenable Nessus for automated scan imports, real-time vulnerability tracking, and comprehensive reporting.
- Automated scan synchronization
- Advanced filtering and grouping
- Multi-sheet Excel exports
Multi-Scanner Ingestion
NewOpenVAS, OWASP ZAP, Trivy, Kyverno, Semgrep and Gitleaks feed the same findings, host pages and reports as Nessus.
- Re-scans update findings, never duplicate them
- Fixed findings closed automatically
- Leaked secret values are never stored
DevSecOps Pipelines
NewSecurity checks run in the pipelines your teams already have, with one include line per project and no changes to existing builds.
- GitLab CI & GitHub Actions
- Kubernetes CronJob for in-cluster policy
- Scoped tokens & ready-to-run setup scripts
Threat-Informed Prioritization
NewEvery finding gets a P1–P4 priority with its reasons, so teams fix what attackers are actually exploiting first.
- CISA Known Exploited Vulnerabilities
- EPSS exploit probability
- Asset criticality weighting
Advanced Analytics
Interactive dashboards with real-time vulnerability trends, remediation progress tracking, and comprehensive security metrics.
- Interactive vulnerability charts
- Remediation progress tracking
- Risk-based prioritization
Smart Search
Instant global search for CVEs, Hosts, and Vulnerabilities. Filter results across your entire infrastructure in milliseconds.
- Global CVE Search
- Host & IP Filtering
- Vulnerability Lookup
Folder & Project Reporting
NewPDF and Excel reports scoped to a Nessus folder or a development project, with a "Fix first" list and suggested fixes.
- Folders & development projects
- Bulk Host Selection
- Multi-format Exports
Patch Tracking
Track remediation progress with precision. Findings close when a scan confirms the fix, and reopen if the issue comes back.
- Remediation % Tracking
- False positives recorded with who, when & why
- PoC availability check
AI Security Assistant
LiveOn-prem AI assistant that understands your scan data, answers security questions, and suggests remediation priorities — no data leaves your network.
- Natural language CVE & host queries
- Remediation plan generation
- Persistent conversation history
Dark Mode & Themes
Full dark mode support across every page — charts, tables, modals, and nav all adapt seamlessly. Preference is saved per session.
- Plotly charts with dark-aware tooltips
- Mobile-responsive nav with hamburger menu
- Keyboard shortcut ? for help panel
Security & 2FA
Enterprise-grade authentication hardening with TOTP two-factor authentication, CSRF protection, rate limiting, and audit event logging.
- TOTP-based two-factor authentication
- Rate limiting & brute-force protection
- Admin login audit trail
Smart Notifications
Real-time in-app notifications for scan completions, new critical vulnerabilities, and remediation task updates — with mark-all-read support.
- Scan & sync event alerts
- Unread badge counter
- Dark-mode dropdown support
Why Teams Choose Vulnaris
Built to reduce noise, accelerate remediation, and deliver clear outcomes with AI assistance
Noise Reduction
Deduplicate across scans, set false positives aside with a recorded reason, and focus on what attackers actually exploit.
AI-Powered Insights
Ask the built-in AI assistant about your vulnerabilities and get instant, context-aware remediation guidance.
Faster Remediation
Coordinate fixes with patch status tracking, remediation tasks, and export-ready PDF & Excel reports.
Get Started in Minutes
Upload CSV files, sync Nessus, or connect your other scanners and CI pipelines from Settings → Integrations
CSV Upload Workflow
Upload Your Scan Files
Drag and drop CSV files or click to select multiple files for batch processing
Automatic Processing
Our system automatically parses and deduplicates vulnerabilities across all uploaded files
View Results
Access comprehensive reports with charts, statistics, and detailed vulnerability information
Nessus Integration
Connect to Nessus
Configure your Nessus API credentials in the settings for automated scan imports
Sync Scans
Import scans directly from Nessus with automatic vulnerability parsing and deduplication
Advanced Analytics
Access trend analysis, remediation tracking, and multi-sheet Excel exports
Vulnaris — Help
Quick Navigation
- Scan Report — View vulnerability data by host and severity
- Reporting — Generate PDF/Excel reports and dashboards
- Findings — Browse all findings with filter & search
- Scan History — Track scan history and results
- Applications — Map vulnerabilities to business applications
AI Assistant
Use the chat bubble on any page. Ask questions like "show critical vulnerabilities on host-01" or "how to remediate CVE-2024-1234?"
Keyboard Shortcuts
- Esc — Close modals / dismiss alerts
- ? — Open this help dialog