yahoo/gryffin

Health v2 · maintenance only

Flags: no_releases archived

Adoption not part of the score

2052 stars · 228 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Gryffin is a large-scale web security scanning platform written in Go, built on a publisher-subscriber architecture for horizontal scaling. It focuses on crawl coverage via page deduplication and DOM rendering, delegating actual fuzzing to external tools like sqlmap and arachni.

Use cases

• scan thousands of web applications for security vulnerabilities at scale
• crawl javascript-heavy single page apps to discover links
• deduplicate template-driven pages during a security crawl
• integrate custom fuzzers like sqlmap into a scanning pipeline
• horizontally scale web vulnerability scanning infrastructure

When to choose

• you need to scan a very large number of web apps with horizontal scaling
• you want a crawl/dedup platform to plug your own fuzzers into
• you need DOM rendering of client-side apps during crawling

When to avoid

• you want a modern actively maintained scanner - the repo is archived since ~2021 and relies on deprecated PhantomJS
• you need a turnkey scanner with built-in vulnerability checks
• you want Windows-native or cloud-managed scanning without self-hosting

Facets

service · maturity abandoned

penetration-testing web-scraping security vulnerability-scanning security web-development penetration-testing go self-hosted web-security-scanner crawler fuzzing-platform pub-sub phantomjs archived linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="yahoo/gryffin")