hevnsnt/CVEngine
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
From the publisher
README & documentation
Source previewRead the project’s overview, installation instructions and usage examples. The original README is the source of truth.
The most advanced external attack surface assessment you can get for free. Type in your domain. cvENGINE finds everything you expose, then tells you which of today's exploited CVEs can actually hit you, with proof. No license fee. No per-asset pricing. No black box. 100% open source and self-hosted. Attack surface tools find assets. Vulnerability scanners find flaws. Threat feeds find CVEs. cvENGINE runs all three as one continuous loop and hands you a verdict instead of a pile of alerts. It answers the question that matters: of everything exploited today, what do I have exposed? Run a Sentinel on any machine and cvENGINE scans through it. Put one outside your network to see what the internet sees. Put one inside to reach what no outside scanner can: declare a private range, and the Sentinel finds the live hosts in it and runs the same nmap, naabu, Nuclei, TLS, UDP,…
Read the full README ↗ · Preview checked 2026-11-01T00:50:27.922Z
Inside the original README — Document outline
- Know what you expose. Fix what's exploitable first.
- Everything in the box
- New in 1.3
- Sentinels: scan from anywhere, including inside your network
- OpenVAS, built in and off by default
- And a ton more
- How it works
- Built on the best
- Install in minutes
- Safe by design
- Documentation
- Credits and license
Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.
Links from the README
References supplied by the publisher, not independently verified endorsements. Check the destination before downloading files or entering credentials.
Documentation belongs to its respective authors. Reported project/model license: GPL-3.0. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.
What this repository does
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
Repository facts
- Owner
- hevnsnt
- Primary language
- Python
- Stars
- 543
- Forks
- 89
- Open issues + pull requests
- 11
- License
- GPL-3.0
- Archived
- No
- Default branch
- master
- Created
- 2026-10-24T22:34:43.000Z
- Last push
- 2026-10-31T07:23:31.000Z
Topics and intended use
Owner-supplied topics: ai, attack-surface-management, bbot, cybersecurity, mcp, nmap, nuclei, vulnerability-scanner
Review the README for scope, installation, examples and limitations. We do not run repository code or certify it.
Evaluate before installing
Review licensing and dependencies, inspect recent commits and unresolved issues, and test in an isolated environment before production use. Stars and forks alone cannot answer these questions.
Source and freshness
Source: GitHub. Metadata observed 2026-10-31T12:17:23.005Z. Daily imports are snapshots, not real-time monitoring.
Popularity and source listings do not establish security, suitability, licensing rights or benchmark performance.
Related repositories
EbookFoundation/free-programming-books
donnemartin/system-design-primer