78778443/QingScan

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1831 stars · 289 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

QingScan is a self-hosted, open-source security operations platform that unifies vulnerability scanning, code auditing, asset inventory, and ticket-based remediation workflows. It includes built-in PHP-based scanning engines for web vulnerabilities, SQL injection, port and subdomain discovery, directory scanning, fingerprinting, and weak-password brute-forcing.

Use cases

• scan websites for vulnerabilities
• discover subdomains and open ports for a target
• audit source code for SQL injection and XSS
• manage asset inventory of hosts and domains
• run batch POC verification against targets
• track vulnerability remediation with tickets
• detect weak passwords and WAF presence

When to choose

• you want an all-in-one self-hosted vulnerability management platform with a web UI
• you need asset discovery plus scanning plus ticketing in one tool
• you prefer a zero-external-dependency scanner that installs and runs out of the box on Linux

When to avoid

• you need a lightweight CLI-only scanner for quick one-off checks
• you require a permissively licensed tool for commercial use, since QingScan prohibits unauthorized commercial use and has no standard open-source license
• you need official support for non-Ubuntu platforms without manual setup

Facets

application · maturity active

security vulnerability-scanning web-scraping search-engine monitoring self-hosted http-server security penetration-testing web-development self-hosted developer-tools self-hosted php vulnerability-scanner pentesting asset-discovery subdomain-enumeration code-audit sql-injection fingerprinting weak-password-bruteforce thinkphp security-operations-platform linux web-server docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="78778443/QingScan")