Launched this week

VScanX

Launched this week

Deterministic security scanner with zero false positives

14 followers

Deterministic security scanner with zero false positives

14 followers

Visit website

VScanX is a deterministic, verification-driven security scanner designed for developers. Unlike traditional scanners that generate noisy alerts, VScanX utilizes state-replay contracts to mathematically verify vulnerability proofs. Features include multi-layered Web & Web3 scanning, secure OOB provisioning, automated PoC generation, and a beautiful offline semantic documentation layer. Scan, diff, and verify your attack surface with absolute precision and zero noise.

Free

Launch tags:Open Source•Developer Tools•GitHub

Launch Team / Built With

/monitor by FirecrawlNotify your AI agent when the web changes

Promoted

Maker

📌

Hello Product Hunt community. I am pleased to introduce VScanX, a deterministic, verification-driven security scanner built specifically for developers and security engineers. The inspiration for this project came from a common frustration in software development: noisy security reports. Traditional scanners often produce massive lists of potential issues, forcing developers to spend hours manually reproducing and validating findings just to filter out false positives. VScanX takes a different approach by focusing on verification. Instead of relying on passive regex matching or simple heuristics, the platform uses deterministic reproduction contracts to validate findings. If an issue is flagged, it means the system has successfully generated a safe, reproducible proof of concept. In addition to core web and smart contract scanning capabilities, VScanX includes a local-first semantic documentation layer. This allows teams to privately inspect their security status, track state evolution, and compare diffs between scans without sending sensitive data to external servers. The project is completely open source and hosted on GitHub. I would be highly grateful for your feedback, questions, or suggestions on how we can improve security testing workflows for developers. Thank you for your time and support.

Report

2d ago

mailX by mailwarm

💡 Bright idea

Is there a way to have different scans over time so you can see what changed after a deploy?

Report

1d ago

Maker

@naimz Yes, absolutely! We built a diff engine directly into VScanX for exactly this.

You can save your scans under unique IDs (like run_001 and run_002) and compare them offline with a simple command:

python vscanx.py --diff --scan-id run_001 --scan-id2 run_002

This compares the results and tells you exactly what is new, what was successfully patched, and what remained unchanged after your deploy.

Report

1d ago

mailX by mailwarm

@hnikhil awesome!!

Report

1d ago