BugBounty Arsenal

What it does

Free, open-source web security scanner — self-hostable with one `docker compose up`. Not just "here's what's broken": an AI advisor tells you how to fix each finding (and, for authorized testing, how to reproduce it). Plus a live feed of new bug bounty programs across HackerOne, Bugcrowd, Intigriti & YesWeHack, scheduled scans that alert only on new findings, CI/CD gating + SARIF export, and 53 detectors overhauled to cut false positives. Free, no card, no lock-in.

Free, open-source web security scanner with an AI advisor that explains how to fix each finding. Scheduled scans, CI/CD, SARIF — self-hostable.

BugBounty Arsenal is a free, open-source web application security scanner for bug bounty hunters and small teams. It runs 53 detectors across reconnaissance, injection, SSRF, XSS, authentication and more, then an AI advisor explains how to fix each finding — and, for authorized testing, how to reproduce it. Includes scheduled scans that alert only on new findings, CI/CD gating with a GitHub Action and CLI, SARIF export for GitHub Code Scanning, attack-surface tracking and a triage workflow. Self-hostable with one docker composefrom bugbounty-arsenal.net

• 
  Hackarpoof2022 · ▲70

  The payment bypassing solution

• 
  AttackerViewFeb 2026 · attackerview.com · ▲13

  Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t

• 
  OpenHack – OSS security scanner, 40x cheaper, on par with Opus 4.6Jun 2026 · github.com · ▲12

  Open Source Agentic Security Scanner. Contribute to openhackai/OpenHack development by creating an account on GitHub.

• 
  Automated bug fixing powered by LLMs2023 · resolvd.ai · ▲9

  Hey everyone, My friend and I built a simple bug fixing app that listens for alerts/issues from Sentry, contextualizes it against your codebase, and any other data sources you wish to connect (right now we support Notion, Google Docs, and Slack), and deploys an ai agent to write a PR for review in Github or Gitlab to solve the bug. Our current demo shows the end-to-end process for a trivial bug fix, but we have been testing it with open source python repos like http-pie, comparing how our agent solves a bug compared to a human engineer and it gets fairly close. We are working on adding…

• 
  Panguard.AIJul 2026 · panguard.ai · ▲20

  Open-source malware scanner and runtime guard for AI agents

• 
  BugbopJan 2026 · bugbop.com · ▲3

  Hi HN! I created Bugbop over the last year now I'm officially releasing it! It’s a platform for teams that want to run their first bug bounty without expensive contracts. I come from a SaaS technical founder background where I ran our program for years. Now I've decided to make something better suited to that niche. The model is simple: only pay when valid vulnerabilities are found. No ongoing subscriptions. Set budgets to avoid going over. The app's still in the early days but it's working: security bugs are getting paid and bug hunters are getting bounties. It's using AI to review check if…

• 
  /dev/null▲490

  a social network for devs

  Dev tools · 4d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 29d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Run full iOS 16.5 firmware on Android Devices▲393

  Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.

  Dev tools · 16h ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 24d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 21d ago · talanoa.email

• IR
  I replaced a $120k bowling center system with $1,600 in ESP32s▲2,935

  I might be the only SRE on Earth with his own bowling center. It's a more in-depth gig than you'd think. My family and I bought an abandoned 8-lane bowling center in the rural mid-west. In our small town there weren't many recreation options for families. You've heard of a food desert? This is an R&R desert. It had been abandoned for a good reason. The roof leaks, the electrical system was constantly surging, and my 70-year-old bowling equipment (still) doesn't work perfectly. The system that keeps your score is particularly interesting to me. It's the thing you watch during your game, but…

  Life & fun · Jul 2026

• 
  Elevators▲1,680

  How elevators push your buttons

  Life & fun · Jul 2026 · john.fun

• 
  18 Words▲1,160

  Play 18 Words, the free daily word puzzle. The official home is 18words.com. Tap Play now to open today

  Life & fun · Jul 2026 · 18words.com

• BA
  Bento - An entire PowerPoint in one HTML file (edit+view+data+collab)▲1,033

  Over the past few months, our team has been building more and more slidedecks using web frontend technologies with coding harnesses like Claude Code, but a common complaint is to make even small edits we need to edit the code either manually or via the harness. To avoid this loop, I ended up creating Bento, a single HTML file with everything you need in a slide tool including animations and shared editing. There's no install or cloud login, everything works offline. The default deck is around 560 KB and it doesn't need to fetch anything once you got it. Open it in a browser and then you can…

  Dev tools · Jul 2026 · bento.page

• 
  Getting GLM 5.2 running on my slow computer▲937

  A few days ago I found myself trying out GLM 5.2 and was really positively impressed. The capabilities and security I was getting from this LLM are similar to those I've gotten from models like Claude or GPT, and this really surprised me. But then I thought, "I wonder how it would work on a normal computer like mine," and above all, "I wonder if it would work without going into OOM on a computer like mine." So I started working with the help of agents to test this possibility. I started converting the model to int4, understanding MTP usage, and if possible implementing DSA for long context.…

  AI · Jul 2026 · github.com

• 
  OpenSEO▲928

  Hello! For the last 2 months, I've been building OpenSEO. It's a user friendly UI wrapping the DataForSEO API which has high quality SEO data for keywords, backlinks, AI SEO and competitor research. Instead of paying $100+ per month, you buy DataForSEO credits and pay only for usage. The coolest thing about the project so far has been hearing about what people are building on top of it. People are using coding agents to quickly integrate with Google Search Console, Google Ads and building their own AI SEO and reporting features. Many were already building their own custom solutions around…

  Dev tools · Jul 2026 · openseo.so