Golem Security Scanner

Golem Security Scanner: Open Source Web Security Audit Tool

Discover vulnerabilities in web applications with Golem Security Scanner, a free and open source web security audit tool, identifying issues like cross-site scripting, SQL injection, and improper access control.

What is Golem Security Scanner?

Golem is an open source web application security scanner designed to help developers and security professionals identify vulnerabilities in their web apps and APIs. It works by crawling the target application and auditing it for common issues like cross-site scripting, SQL injection, command injection, path traversal, insecure deserialization, and improper access control.

Some key features of Golem include:

• Easy to install and use - just download and run the Docker image
• Automatic crawling and scanning of web apps
• Hundreds of vulnerability tests covering OWASP Top 10 and more
• CLI and web UI reports showing vulnerability details
• Authentication scanning for common frameworks like Django, Rails, Laravel
• Extensible via plugins to add new vuln checks

Golem is well-suited for developers looking to build and continuously test secure software, as well as security engineers and analysts looking to find weaknesses in web apps as part of application security programs or pen testing engagements. Its open source nature provides transparency into vulnerability detection logic and flexibility to customize scans.

Golem Security Scanner Features

Official Links