this post was submitted on 12 Feb 2026
30 points (100.0% liked)

Selfhosted

61168 readers
264 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

Can someone recommend some self-hosted or not, tool that I could schedule for periodical scans of all I host and is exposed to public internet?

I think I did all by the book now, including crowdsec and/or fail2ban, but recently for example I got an email from German CERT that my n8n is out of date and has some CVEs. All of them were not exploitable in my case but that got me thinking that if CERT can do it, maybe there are some services or tools that I could use and get alerts sooner if something is vulnerable in my infrastructure.

Any recommendations welcomed! Ideally self hosted and FOSS of course.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] Brkdncr@lemmy.world 11 points 5 months ago* (last edited 5 months ago) (1 children)

OpenVAS is a vulnerability scanner that appears to be open source.

Metasploit is another that I think is free and might be open source.

[โ€“] joshcodes@programming.dev 5 points 5 months ago

OpenVAS is a vulnerability scanner. Metasploit is a penetration testing framework.

First one does what OP wants. Second one less so, and is more hands on.

See dirbuster for automated dumb searching of web directories, gives you response codes to tell you if a page is accessible to the outside world. See nuclei which I haven't used myself but seems to get good reviews for automated vuln scanning from the command line - has nice output and seems simple to use.

They're both easy to use and install on something like Kali Linux.