Tsunami Security Scanner

Health v2 · maintenance only

Adoption not part of the score

8606 stars · 924 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Tsunami is a general-purpose network security scanner from Google that detects high-severity vulnerabilities with high confidence. It relies on an extensible plugin system, with publicly available plugins hosted in a companion repository.

Use cases

• scan my network for high severity vulnerabilities
• detect vulnerable services on my infrastructure
• find exposed services with known CVEs
• run a plugin-based security scanner on my servers
• audit internal network for misconfigured services

When to choose

• you need high-confidence detection of high-severity vulnerabilities rather than noisy broad scans
• you want an extensible scanner you can add custom detection plugins to
• you are scanning large internal or cloud networks for known vulnerable services

When to avoid

• you need a full penetration testing or exploitation framework
• you want a lightweight point-and-click desktop scanner
• you need web application DAST with crawling and fuzzing out of the box

Facets

cli-tool · maturity active

security vulnerability-scanning plugin-system networking security penetration-testing developer-tools windows jvm cli vulnerability-detection network-scanner java extensible-plugins google linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="google/tsunami-security-scanner")