servasecservasec

Your security findings,
unified

Centralize, prioritize, and track vulnerabilit

20+ scannersOpen sourceSelf-hostedAGPLv3
servasec dashboard showing severity distribution and KPIs
servasec findings page with filtering
servasec applications page
$curl -fsSL https://servasec.com/install.sh | sh -s -- -i

Supported scanners

Ingest results from 20+ security scanners into a single dashboard. Auto-detected, normalized, and deduplicated.

SemgrepSAST
TrivySCA
GitleaksSecrets
NucleiDAST
CheckovIaC
GrypeSCA
BanditSAST
Kube-benchK8s

Unified dashboard

Get a single pane of glass across all your security tools. Severity distribution, KPIs, and recent activity at a glance. No more jumping between different scanner UIs.

Unified dashboard

Multi-scanner support

Ingest from Semgrep, Trivy, Gitleaks, Grype, Nuclei, and more. Servasec auto-detects the scanner type from file content and normalizes findings into a unified format.

Multi-scanner support

Version comparison

Compare findings between versions to instantly see what was fixed, what is new, and what is still present. Track regressions and measure remediation progress over time.

Version comparison

Open source. AGPLv3 licensed.

Self-host servasec on your infrastructure with a single Docker Compose command. No vendor lock-in, full data ownership.

Frequently Asked Questions