archerysec/archerysec

Health v2 · maintenance only

Adoption not part of the score

2471 stars · 526 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

ArcherySec is an open-source application security orchestration and correlation (ASOC) and vulnerability management platform that integrates 80+ commercial and open-source scanners. It consolidates, deduplicates, and correlates scan results from web, network, and SAST tools into unified dashboards with CI/CD pipeline integration.

Use cases

• manage vulnerabilities from multiple scanners in one dashboard
• orchestrate security scans in CI/CD pipelines
• correlate and deduplicate scan results from ZAP, OpenVAS, Burp, and Nikto
• run authenticated web application scanning with selenium
• track and triage vulnerabilities with JIRA ticketing
• shift-left security testing in DevSecOps workflows
• consolidate SAST and DAST scan data for pentesters

When to choose

• you need a free, self-hosted alternative to commercial ASOC/ASPM platforms
• your team juggles results from many open-source and commercial scanners
• you want vulnerability management integrated into CI/CD pipelines
• you need JIRA integration and consolidated reporting for security findings

When to avoid

• you need a lightweight CLI-only scanner rather than a full platform
• you require enterprise-grade support and SLAs
• you want a simple single-scanner setup without orchestration overhead
• you need a managed SaaS solution

Facets

application · maturity active

security vulnerability-scanning monitoring workflow-automation api-framework self-hosted security developer-tools self-hosted python cli vulnerability-management asoc aspm devsecops scanner-orchestration pentesting jira-integration sast dast devops automation docker web-server linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="archerysec/archerysec")