VScanX

What it does

VScanX is a deterministic, verification-driven security scanner designed for developers. Unlike traditional scanners that generate noisy alerts, VScanX utilizes state-replay contracts to mathematically verify vulnerability proofs. Features include multi-layered Web & Web3 scanning, secure OOB provisioning, automated PoC generation, and a beautiful offline semantic documentation layer. Scan, diff, and verify your attack surface with absolute precision and zero noise.

Reproducible security workflows, state evolution tracking, and low-noise vulnerability verification for enterprise-grade applications.

Unifying dynamic scanning capabilities and active payload validation. Eliminate false positives and trace regression states continuously. Select any layout module below to view live framework execution and dynamic security traces in real-time. Separates passive probing steps from active exploit confirmations to ensure verified reliability. Snapshots state indices across audit runs to detect regression mutations and delta records. Aggregates verified threat items into a standardized validation JSON output formats. Connects independent module run stages asynchronously using dedicated broadcast event buses. Maintains transparent debug exception logging to ensure scan accuracy. Inspect live…from vscanx.vercel.app

• 
  VSCan - Detect Malicious VSCode Extensions2025 · vscan.dev · ▲52

  Did you know that VSCode extensions run with full access to your system—including file system, network, and credentials? Worse, dozens of malicious extensions have already made it into the marketplace, silently compromising devices. I am a security researcher and student developer who ran into this problem myself. To help tackle this, I built a 100% free tool (no login required) that scans VSCode (and Cursor/Windsurf) extensions for: - Hidden malware and obfuscated code - Dangerous permissions and API misuse - Vulnerable dependencies and suspicious network connections Users have already…

• 
  VulnCost for Visual Studio Code2020 · snyk.io · ▲126

  An open source security scanner for Visual Studio Code

• 
  OpenScan – open-source document scanner app2021 · github.com · ▲200

  Document Scanner that protects your privacy. Contribute to ethereal-developers/OpenScan development by creating an account on GitHub.

• 
  Heyhack Scan2022 · auth.heyhack.com · ▲271

  SaaS pen-testing that surpasses the level of ethical hackers

• 
  Zerox – Document OCR with GPT-mini2024 · github.com · ▲246

  This started out as a weekend hack with gpt-4-mini, using the very basic strategy of "just ask the ai to ocr the document". But this turned out to be better performing than our current implementation of Unstructured/Textract. At pretty much the same cost. I've tested almost every variant of document OCR over the past year, especially trying things like table / chart extraction. I've found the rules based extraction has always been lacking. Documents are meant to be a visual representation after all. With weird layouts, tables, charts, etc. Using a vision model just make sense! In…

• 
  VulScanFeb 2026 · vulscan.nexorium.io · ▲4

  Python security scanner that eliminates false positives

• 
  /dev/null▲483

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲345

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  Brew ▲900

  Like Claude design for email marketing

  AI · May 2026 · brew.new

• 
  Kilo Code for VS Code▲896

  Parallel agents, diff reviewer, and multi-model comparisons

  Dev tools · May 2026 · kilo.ai

• 
  StoreClaw▲806

  Grow your store profits with agents that know how to sell

  AI · May 2026 · storeclaw.ai

• 
  PollyReach▲795

  Give your agent a real number and voice to make calls.

  AI · May 2026 · pollyreach.ai

• 
  Needle: We Distilled Gemini Tool Calling into a 26M Model▲776

  Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…

  Life & fun · May 2026 · github.com

• 
  Files.md – Open-source alternative to Obsidian▲730

  🌱 Private, quiet space for thinking. Simple app for .md files. - zakirullin/files.md

  Dev tools · May 2026 · github.com