gobysec/Goby

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1517 stars · 153 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Goby is a network security assessment tool that maps an organization's attack surface and scans for known vulnerabilities and weak passwords. It combines asset fingerprinting, port scanning, protocol recognition, and exploit checking in an Electron-based desktop app.

Use cases

• map the attack surface of a company's internet-exposed assets
• scan a network for known CVE vulnerabilities
• find weak passwords on network devices
• enumerate services and fingerprint hardware and software across a subnet
• pivot from external vulnerabilities into an intranet during a pentest
• identify IoT, ICS, and SCADA devices on a network

When to choose

• you need combined asset discovery and vulnerability scanning in one GUI tool
• you do red-team or offensive security assessments against enterprise networks
• you want built-in recognition rules for a wide range of devices, protocols, and products

When to avoid

• you need fully open-source or auditable tooling - the core is distributed as a binary without a license file in the repo
• you only need lightweight command-line port scanning (nmap or masscan fit better)
• you require deep manual exploitation rather than broad automated scanning

Facets

application · maturity active

security vulnerability-scanning penetration-testing networking osint security penetration-testing networking windows cross-platform attack-surface-mapping port-scanner exploit red-team cve asset-discovery closed-source-binary macos linux electron

Member repositories

For agents

markdown · JSON · MCP: product_card(name="gobysec/Goby")