GhostCheck : Nessus gives 200 findings. We give 3 confirmed ones.

Hey Product Hunt! 👋 I'm Bishesh, the solo founder behind GhostCheck. 16 years old, building from Nepal. I built this out of pure frustration. Was doing a security assessment, ran Nessus, got 200+ findings. Spent 3 hours triaging. 11 were real. That's not a security tool — that's noise with a price tag of $3,990/year. So I built GhostCheck. The core idea is simple: don't report a vulnerability unless you can prove it exists. Every finding goes through a live verification probe before it appears in your report. What's under the hood: → 9-module scan pipeline (ports, SSL, CVE match, HTTP headers, DNS, path scan, service probes, active DAST, fingerprinting) → Active probes: XSS reflection, SQLi error detection, CORS, open redirect, host header injection, cookie flags, and more → AI explanations via local Ollama — fully offline → PDF reports with verification score and proof blocks → CISA KEV enrichment — flags actively exploited CVEs → 100% local — zero data leaves your machine, ever Built the entire stack solo — Python engine, Electron + React UI, WeasyPrint PDF renderer, CVE matching against 357k NVD entries. Still in beta. Would love brutal honest feedback from the security community here — what's missing, what's wrong, what would make this actually useful for your workflow. Ask me anything 👇