Supported scanners

servasec ingests results from the most popular open source and commercial security scanners. Push findings via API or CI/CD pipeline.

Semgrep•Trivy•Gitleaks•Grype•Snyk•Checkov•TruffleHog•Nuclei•Bandit•Gosec•Kube-bench•Kubescape•npm audit•OSV-Scanner•Tfsec•SARIF•Semgrep•Trivy•Gitleaks•Grype•Snyk•Checkov•TruffleHog•Nuclei•Bandit•Gosec•Kube-bench•Kubescape•npm audit•OSV-Scanner•Tfsec•SARIF•

Semgrep

Lightweight static analysis for finding bugs and enforcing coding standards. Supports 30+ languages.

Container / SCA

Trivy

Comprehensive vulnerability scanner for containers, filesystems, and Git repositories.

Gitleaks

Detect hardcoded secrets like passwords, API keys, and tokens in Git repositories.

Grype

Fast vulnerability scanner for container images and filesystems with CVE matching.

Snyk

Developer security platform for finding and fixing vulnerabilities in dependencies.

Checkov

Static analysis for infrastructure as code. Scans Terraform, CloudFormation, Kubernetes, and more.

TruffleHog

Scan Git repositories for credentials, secrets, and sensitive information with deep content analysis.

Nuclei

Fast, template-based vulnerability scanner with 8000+ community-contributed templates.

Bandit

Python-specific static analysis tool that finds common security issues in Python code.

Gosec

Go static analysis tool that inspects source code for security problems.

Kube-bench

Checks Kubernetes clusters against CIS Kubernetes Benchmark security recommendations.

Kubescape

Kubernetes security scanner for clusters, YAML files, and Helm charts.

npm audit

Built-in npm dependency vulnerability scanner for Node.js projects.

OSV-Scanner

Vulnerability scanner using Google's OSV database for comprehensive dependency coverage.

Tfsec

Static analysis for Terraform code to detect potential security issues.

SARIF

Generic SARIF format parser for any SARIF-compliant security tool output.

How ingestion works

Push results

Send scan results to servasec via a simple curl command from your CI/CD pipeline.

Auto-detect scanner

servasec automatically detects the scanner type from file content. No manual configuration needed.

Centralize and track

Findings appear in the dashboard with severity, metadata, and version context.

Compatible formats

SARIFJSONCSV

Scanner categories

SASTSCASecretsContainerIaCKubernetesDAST

Start ingesting today

Self-host servasec and connect your scanners in minutes. AGPLv3 licensed, full data ownership.

Frequently Asked Questions