Launching today

BugBounty Arsenal

Launching today

Free continuous security scanner with new-finding alerts

4 followers

Free continuous security scanner with new-finding alerts

4 followers

Visit website

Most scanners run once and forget. This one keeps watching your targets: schedule recurring scans (daily/weekly/monthly) and get an email/Discord/Slack alert only when NEW findings appear vs the previous run. It also tracks your attack surface (hosts, subdomains, tech, ports) over time, has a triage workflow that remembers your decisions across re-scans, and ships a CLI + GitHub Action to fail a CI build on new criticals. 50+ detectors across recon, web, API and mobile. Free, open source.

Free

Launch tags:Open Source•Developer Tools•GitHub

Launch Team / Built With

Framer AI AgentsDesign and publish professional sites with AI

Promoted

Maker

📌

Hi Product Hunt 👋 I built BugBounty Arsenal because paid scanners (Detectify, Intruder…) cost hundreds a month, and one-off free scanners don't tell you what CHANGED between runs. So this one focuses on continuous monitoring: schedule a target, and it only pings you when something NEW shows up — plus attack-surface tracking, triage that carries over, and a CLI/GitHub Action for CI. It's genuinely free and open source. I'd love your feedback on the detection quality and the continuous-scanning flow. Happy to answer anything!

Report

1d ago

The recurring scan with diffing against previous runs is genuinely clever, especially the CI gate on new criticals. One thing that would make this way more useful for me: a SARIF export so the findings plug straight into GitHub code scanning instead of relying only on exit codes. Most teams already have a Security tab wired up and would love seeing BugBounty Arsenal's alerts show up right alongside CodeQL results.

Report

12h ago