VulScan

What it does

Stop wasting time on false positives. VulScan uses reachability analysis to show only real vulnerabilities in your Python code. Traditional scanners flag hundreds of issues - 80-90% are false positives because your code never uses the vulnerable functions. VulScan traces your actual code execution paths to show ONLY exploitable vulnerabilities. Get exact file locations, fix recommendations, and compliance reports (SOC2, HIPAA, ISO 27001). 2-minute scans. $29/month.

Officially the top-rated Python vulnerability scanner. VulScan is the leading platform for context-aware reachability analysis, eliminating 90% of false positives. The best, cheapest, and most professional SCA tool for developers.

After scanning thousands of lines of Python for vulnerabilities, we've decided to power down. We built something we believed in, but not enough developers found their way here to make it sustainable. Building a security tool taught us a lot, about code, about edge cases, and about the gap between an idea and afrom vulscan.nexorium.io

• 
  VulnCost for Visual Studio Code2020 · snyk.io · ▲126

  An open source security scanner for Visual Studio Code

• 
  Browser-based XSS scanner2024 · github.com · ▲57

  This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…

• 
  VSCan - Detect Malicious VSCode Extensions2025 · vscan.dev · ▲52

  Did you know that VSCode extensions run with full access to your system—including file system, network, and credentials? Worse, dozens of malicious extensions have already made it into the marketplace, silently compromising devices. I am a security researcher and student developer who ran into this problem myself. To help tackle this, I built a 100% free tool (no login required) that scans VSCode (and Cursor/Windsurf) extensions for: - Hidden malware and obfuscated code - Dangerous permissions and API misuse - Vulnerable dependencies and suspicious network connections Users have already…

• 
  VScanXMay 2026 · vscanx.vercel.app · ▲11

  Deterministic security scanner with zero false positives

• 
  VulnixSecMay 2026 · vulnixsec.com · ▲2

  Scan websites for real security issues in minutes

• 
  SafeCheck2025 · ▲7

  Security scanner for indie hackers

• 
  /dev/null▲484

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 28d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 26d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 21d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  Rork Max▲1,428

  Best AI for iOS apps. Website that replaces Xcode

  Life & fun · Feb 2026 · rork.com

• 
  happycapy▲1,365

  The agent-native computer, for the rest of us

  AI · Feb 2026 · happycapy.ai

• 
  SuperX▲897

  All-in-one growth OS for serious 𝕏 creators

  AI · Feb 2026 · superx.so

• 
  KiloClaw▲868

  Hosted OpenClaw. No Mac mini required.

  Dev tools · Feb 2026 · kilo.ai

• 
  Lovon AI Therapy▲801

  Feel closer and have more fun with your partner every day!

  AI · Feb 2026 · lovon.app

• 
  I spent 3 years reverse-engineering a 40 yo stock market sim from 1986▲721

  Hello my name is Ben Ward for the past 3 years I have been remastering the financial game Wall Street Raider created by Michael Jenkins originally on DOS in 1986. It has been a rough journey but I finally see the light at the end of the tunnel. I just recently redid the website and thought maybe the full story of how this project came to be would interest you all. Thank you for reading.

  Work · Feb 2026 · wallstreetraider.com