Dastardly

In plain words

Dastardly is a free web application security scanner designed for CI/CD pipelines. It performs external security scans on web applications to identify vulnerabilities from an attacker's perspective. The tool integrates with CI/CD platforms through Docker containers and can be deployed either in the cloud or self-hosted. Scan results are exported as JUnit or Burp XML files and can be viewed within the CI/CD environment or a dedicated dashboard.

written from the facts on this page · October 2026

From the sources

Dastardly is a free, lightweight web application security scanner for your CI/CD pipeline. It looks at your application from the outside - just like an attacker.

Cloud Self-hosted You can use Burp Suite DAST to run CI-driven scans on your CI/CD platform. We also have documents for our legacy solution that used ...

You can use Burp Suite DAST to run CI-driven scans on your CI/CD platform. We also have documents for our legacy solution that used plugins. CI-driven scans enable you to run Burp Scanner from a Docker container in your CI/CD environment. This is an easy way to integrate Burp Suite DAST with your CI/CD platform. It requires you to set up a Burp Suite DAST server. The scan results are saved as a JUnit or Burp XML file. You can view the results of your scans in your CI/CD environment, or in the Burp Suite DAST dashboard. You can run this option on any platform that supports Docker containers, including Jenkins, TeamCity, and GitHub Actions. You can apply custom extensions, BChecks, and BApps…from portswigger.net

• 
  Dependency CI – Continuous testing for your dependencies2016 · dependencyci.com · ▲198

  SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.

• IB
  I built ContainerCVE – a web tool to scan public Docker images2023 · containercve.com · ▲91

  I found it odd there wasn’t a simple web tool to scan Docker Hub images for vulnerabilities. So I built one. It’s powered by the popular open-source tool Trivy.

• 
  GenPTJan 2026 · siemba.io · ▲60

  One-click AI-native security testing for web apps

• 
  Osint tool that finds exposed files on domainsJul 2026 · search.cerast-intelligence.com · ▲58

  hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…

• 
  Smart Scan – REST API, Dashboard, and CI/CD Tools for MCP SecurityNov 2025 · smart.mcpshark.sh · ▲15

  Smart Scan Web Application - A sub-app of MCP Shark

• 
  SupaleakJan 2026 · supaleak.com · ▲14

  Secret scanning for shipped-too-fast websites

Questions this answers

• scancompta

• 
  Run full iOS 16.5 firmware on Android Devices▲515

  Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.

  Dev tools · 1d ago · github.com

• 
  /dev/null▲492

  a social network for devs

  Dev tools · 5d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 29d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 25d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 22d ago · talanoa.email

• 
  VEED.IO▲1,623

  Simple online video editing

  Growth · 2022 · veed.io

• 
  Notion AI (Alpha)▲1,483

  Meet your new partner in thought

  AI · 2022 · app.notion.com

• 
  Rewind▲1,420

  The search engine for your life

  AI · 2022 · rewind.ai

• 
  Trading cards made with e-ink displays▲1,149

  I made a thing! In 2014, I was holding a stack of iPhones and thought to myself: "Hey, if I had each phone display a playing card, I could click a button and they'd shuffle themselves" I pared that idea all the way down to this: trading cards made of e-ink displays. Right now, each card costs me about $20 each, but with only a bit more scale, I think I can get that down to $10. In doing this project, I learned how to design electronics and circuit boards. I learned Rust and wrote my first driver, I upped my CAD skills, 3D printed, and did my first resin casting. I generated the images on the…

  Dev tools · 2022 · wyldcard.io

• 
  Taplio▲1,004

  The all-in-one tool to grow your personal brand on LinkedIn

  Growth · 2022 · taplio.com

• 
  BeforeSunset▲915

  Catch beautiful sights, finish your work before sunset

  Work · 2022