Ross ROSS = Recommend OSS · open-source software intelligence for agents

Tsunami Security Scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. observed · 2026-10-15

github.com/google/tsunami-security-scanner · Java · Apache-2.0 (permissive) observed · 2026-10-15

Health v2 · maintenance only

75/100

  • Activity 98
  • Release rhythm 32
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 2330
  • days_rel: 243
  • days_push: 14
  • n_releases_24m: 1

Full methodology

Adoption not part of the score

8620 stars · 927 forks observed · 2026-10-15

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Tsunami is a general-purpose network security scanner from Google that detects high-severity vulnerabilities with high confidence. It relies on an extensible plugin system, with publicly available plugins hosted in a companion repository.

Use cases

  • scan my network for high severity vulnerabilities
  • detect vulnerable services on my infrastructure
  • find exposed services with known CVEs
  • run a plugin-based security scanner on my servers
  • audit internal network for misconfigured services

When to choose

  • you need high-confidence detection of high-severity vulnerabilities rather than noisy broad scans
  • you want an extensible scanner you can add custom detection plugins to
  • you are scanning large internal or cloud networks for known vulnerable services

When to avoid

  • you need a full penetration testing or exploitation framework
  • you want a lightweight point-and-click desktop scanner
  • you need web application DAST with crawling and fuzzing out of the box

Facets

cli-tool · maturity active

security vulnerability-scanning plugin-system networking security penetration-testing developer-tools windows jvm cli vulnerability-detection network-scanner java extensible-plugins google linux macos docker

1 source

Member repositories

For agents

markdown · JSON · MCP: product_card(name="google/tsunami-security-scanner")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem