[RanaKhan77]

What tool is being added?

Website Vulnerability Scanner — an open-source (Apache-2.0), self-hostable web vulnerability scanning suite, added to the Testing section.

Why it fits DevSecOps

• 200 deterministic scanner modules — SQLi, XSS, SSRF, SSTI, command injection, subdomain takeover, WordPress/CMS, DNS, TLS, security headers, GraphQL, race conditions, plus CI/CD pipeline exposure detection (self-hosted runners, exposed secrets).
• Pipeline-friendly — Docker Compose runtime, CLI-first, deterministic (zero AI = zero flaky verdicts), exit codes and JSON/HTML/PDF report output for CI gates.
• Evidence-backed findings — CVSS-scored with proof, CWE→OWASP mapping, EPSS/KEV enrichment.
• Continuous monitoring — scheduled rescans + attack-surface diffing fit shift-left + production watch workflows.

Checklist

• Added to the correct category (Testing)
• Entry format matches the existing list (* [Name](url) - description)
• Link works (repo is public and active)