CVEngine
CVEngine is a self-hosted tool that maps your public internet exposure and checks which actively exploited CVEs can hit you, for security teams and operators.
What it is good for
- Finding every public host, port, and service a domain exposes
- Ranking known exploited vulnerabilities by what you actually run
- Confirming vulnerabilities with read-only checks and recorded commands
- Tracking new hosts and changed ports over time
At a glance
- Who it is for
- Setup
- Guided command-line setup
Level 4 of 5. You copy and paste commands into a terminal by following the instructions. Comfortable territory for vibe coders.
- Cost
- Free and open source
- Type
- Agent app
- Tasks
- Works with
- Anthropic, OpenAI, OpenRouter, Ollama, vLLM, Slack
Momentum
- Rank this week
- #90
- Best rank
- #90 week 44, 2026
- Stars gained last week
- +336
- GitHub stars
- 564
GitHub numbers as of Nov 2, 2026. Updated weekly.
Ranking history
Official links
Setup steps are on the official pages. We do not repeat them here, since they change.
Questions
- Is CVEngine free?
- Yes. It is free and open source (GPL-3.0 license).
- Do I need to know how to code to use CVEngine?
- You do not need to write code, but setup means copying and pasting commands into a terminal by following its instructions.
- What does CVEngine work with?
- According to its own documentation, it works with Anthropic, OpenAI, OpenRouter, Ollama, vLLM, and Slack.
- What is CVEngine good for?
- Finding every public host, port, and service a domain exposes, ranking known exploited vulnerabilities by what you actually run, confirming vulnerabilities with read-only checks and recorded commands, and tracking new hosts and changed ports over time.
Similar agents
- Nudgebee
Nudgebee is an open-source, self-hosted agent app that investigates cloud and Kubernetes incidents and cuts cloud waste for SRE and DevOps teams.
- roast-room
Roast Room is a council of AI advisor personas that debates a business decision in Claude Code and returns a scored verdict for business owners.
- Bloks
Bloks is a desktop app that runs a team of personal AI agents on your own computer for people who want to keep their files and keys local.
- Multica
Multica is a workspace that lets teams assign issues to AI coding agents like teammates for developers and managers who run several agents.
- ToolJet
ToolJet is an open-source platform that builds internal tools, dashboards, and admin panels for business teams, with AI app generation and agent building.
- OpenShell
OpenShell is a self-hosted runtime that lets autonomous AI agents run in isolated sandboxes with set limits on files, network, and credentials for developers and technical teams.