Completed

Full-Stack Vulnerability Scanner

A full-stack web-based vulnerability scanner built with Next.js, TypeScript and OWASP ZAP for authorised security assessments, featuring automated scanning, scan history and CSV reporting.

Next.jsReactTypeScriptOWASP ZAPTailwind CSSGitHub

GitHub Watch Demo

Project Demonstration

A walkthrough of VulnScanner Enterprise running a localhost vulnerability assessment, including scan execution, exposure scoring, findings review and CSV export.

Project Overview

Problem: Security assessments often rely on multiple tools and manual steps to run scans, review findings and export results for documentation.

Why I built it: I built this project to combine vulnerability scanning, result tracking and reporting in one web application while practising full-stack development and security tooling integration.

Intended for: Security students, IT professionals and developers who need a structured way to run authorised vulnerability assessments and review results in a dashboard.

Key Features

Full-stack web application

Modern web interface built with Next.js and TypeScript for managing security assessments.

OWASP ZAP integration

Integrates OWASP ZAP to perform automated vulnerability scanning against authorised targets.

Automated scanning

Run scans through the application workflow without switching between separate CLI tools.

Scan history

Persistent tracking of previous scans so results can be reviewed and compared over time.

CSV export

Export scan results to CSV for documentation, reporting and further analysis.

Responsive dashboard

Dashboard UI designed to work across desktop and mobile screen sizes.

Technologies

Next.js

React

TypeScript

OWASP ZAP

Tailwind CSS

GitHub

Screenshots

VulnScanner Enterprise dashboard ready to start a new localhost assessment — Dashboard
Start a new localhost security assessment.

VulnScanner Enterprise assessment overview showing exposure score and findings summary — Assessment Overview
Exposure score, findings summary and assessment results after a completed scan.

VulnScanner Enterprise risk analysis with severity distribution and recommended actions — Risk Analysis
Severity distribution and prioritised remediation recommendations.

VulnScanner Enterprise detailed findings with severity badges and CVSS scores — Detailed Findings
Port findings with severity ratings, CVSS scores and remediation guidance.

VulnScanner Enterprise scan history with reopen and delete actions — Scan History
Previously completed assessments can be reopened or deleted.

Vulnerability assessment CSV export opened in Microsoft Excel — CSV Export
Export assessment results to CSV for reporting and further analysis.

Technical Challenges

Integrating OWASP ZAP with a web application

Challenge: Connecting a browser-based dashboard to OWASP ZAP required coordinating scan requests, responses and result handling across the full stack.
Solution: Structured the application around clear scan workflows so authorised targets could be submitted, processed and stored for review in the dashboard.
What I learned: How to design a full-stack security tool that keeps scanning, history and reporting in one cohesive workflow.

Persisting and presenting scan history

Challenge: Scan results needed to remain accessible after each assessment for review and comparison.
Solution: Implemented persistent scan history within the application so previous assessments remain available in the dashboard.
What I learned: The importance of traceable scan records when documenting security assessment work.

Future Improvements

User authentication and role-based access control
Scheduled and recurring scans
Enhanced reporting formats beyond CSV
Performance improvements for larger scan result sets
Additional scan engine configuration options

GitHub

Repository: divineuniquecoder/vulnerabilityScanner
Programming language: TypeScript
Licence: MIT
Latest commit: 4b4ef7f — Initial commit