Vuls is an agentless vulnerability scanner and CVE intelligence aggregator. It identifies security flaws in operating systems, containers, and network devices without requiring the installation of permanent software agents on target machines.
The project distinguishes itself by cross-referencing software versions against multiple vulnerability databases, security advisories, and known exploit catalogs. It utilizes platform-based enumeration and lockfile analysis to detect vulnerabilities in network hardware, programming libraries, and website plugins.
The tool covers a broad range of security auditing capabilities, including Linux and FreeBSD system patching, container security analysis, and the verification of pending kernel reboots. It supports various data acquisition methods, including remote SSH scanning, local execution, and an HTTP-based scan server mode.