Hey Product Hunt! I'm Viibbhu, creator of VulScan. Why I built this: Last year, I ran a security scan on a Python project. Got 247 vulnerabilities. Spent 3 days investigating. 213 were false positives - vulnerabilities in dependencies we installed but never actually used the vulnerable functions. I talked to other developers. Same story everywhere. Alert fatigue is killing application security. Teams ignore warnings because 80-90% are noise. The solution: Reachability analysis. Instead of flagging every vulnerability in every dependency, trace your actual code execution paths. Only flag vulnerabilities in functions your code ACTUALLY calls. How VulScan works: 1. Upload code (GitHub URL, ZIP, or requirements.txt) 2. We parse Python files and build import graph 3. We trace execution paths from entry points to dependencies 4. We flag ONLY vulnerabilities in code you actually use Results: - 80-90% fewer false positives - 2-minute scans (not hours) - Exact file locations & line numbers - Fix recommendations & patched versions - Compliance reports (SOC2, HIPAA, ISO 27001) - $29/month (vs $500-$2,000/month for Snyk/Veracode) I'd love your feedback! What security challenges do you face with your Python projects? What features would make VulScan more useful? Try it free: https://vulscan.nexorium.io I'll be here all day answering questions!

VulScan

Python security scanner that eliminates false positives

Python security scanner that eliminates false positives