VScanX
Deterministic security scanner with zero false positives
Start new thread
Nikhil Dabhade

VScanX - Deterministic security scanner with zero false positives

by•
VScanX is a deterministic, verification-driven security scanner designed for developers. Unlike traditional scanners that generate noisy alerts, VScanX utilizes state-replay contracts to mathematically verify vulnerability proofs. Features include multi-layered Web & Web3 scanning, secure OOB provisioning, automated PoC generation, and a beautiful offline semantic documentation layer. Scan, diff, and verify your attack surface with absolute precision and zero noise.

Add a comment

Replies

Best
Nikhil Dabhade
Maker
📌
Hello Product Hunt community. I am pleased to introduce VScanX, a deterministic, verification-driven security scanner built specifically for developers and security engineers. The inspiration for this project came from a common frustration in software development: noisy security reports. Traditional scanners often produce massive lists of potential issues, forcing developers to spend hours manually reproducing and validating findings just to filter out false positives. VScanX takes a different approach by focusing on verification. Instead of relying on passive regex matching or simple heuristics, the platform uses deterministic reproduction contracts to validate findings. If an issue is flagged, it means the system has successfully generated a safe, reproducible proof of concept. In addition to core web and smart contract scanning capabilities, VScanX includes a local-first semantic documentation layer. This allows teams to privately inspect their security status, track state evolution, and compare diffs between scans without sending sensitive data to external servers. The project is completely open source and hosted on GitHub. I would be highly grateful for your feedback, questions, or suggestions on how we can improve security testing workflows for developers. Thank you for your time and support.
Naim Azoutar
💡 Bright idea

Is there a way to have different scans over time so you can see what changed after a deploy?

Nikhil Dabhade
Maker

@naimz Yes, absolutely! We built a diff engine directly into VScanX for exactly this.

You can save your scans under unique IDs (like run_001 and run_002) and compare them offline with a simple command:

python vscanx.py --diff --scan-id run_001 --scan-id2 run_002

This compares the results and tells you exactly what is new, what was successfully patched, and what remained unchanged after your deploy.

Naim Azoutar

@hnikhil awesome!!