# hevnsnt/CVEngine

> Self-hosted external attack surface assessment platform: discovers internet-facing assets, fingerprints services and versions, matches live CVEs, and validates findings with safe read-only checks.

- Magnitude: 6.1 out of 10 — Early signal
- Stars: 152 total · +24 stars measured 2026-10-26, 00:12–02:16 UTC, ≈ 171 by evening
- Star trust: star growth looks organic
- Category: Security · Language: Python · License: GPL-3.0 · Created: 2026-10-24 · Last push: 2026-10-26
- GitHub: https://github.com/hevnsnt/CVEngine · Page: https://gitnova.dev/en/r/hevnsnt/CVEngine

## Useful for

- Run the Docker Compose stack and scan a domain for open ports and services
- Match discovered product versions against live CVEs from CISA KEV and EPSS
- Connect the MCP server so an AI agent can trigger scans and validation within permissions

## Why it’s here

- Star-counter measurements on 2026-10-26 (UTC), 00:12–02:16: 128 → 152 stars (+24). This is the change over that interval.
- Estimated end-of-day forecast: about +171 stars, using observed gains and the previous day.
- The repository is 2 days old and already has 152 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
- Top new repositories this week: #118.
- About 53 forks a day — people are taking the code.

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 26
- Issues and pull requests: 38
- Watchers: 1
- Average over the last week: 109 per day
- Usual pace: too little history (under two weeks)
- Stars in the last hour (measured): 10
- Latest release: v1.1.2 (2026-10-26)

## Stars per day, last 3 days (oldest → newest, today is partial)

2026-10-24 … 2026-10-26: 0, 156, 24

## Spotted in now

- Top new repositories this week: #118

## Similar by description

1. **projectdiscovery/nuclei-templates** — 1.0 · Steady · Security · JavaScript · +0 stars measured 2026-10-26, 00:18–02:23 UTC, ≈ 2 by evening
   A community-curated collection of templates for the nuclei vulnerability scanner, covering CVEs, exposures, panels and known exploited vulnerabilities. It helps pentesters and bug bounty hunters quickly find issues in applications.
   Full card: https://gitnova.dev/en/r/projectdiscovery/nuclei-templates.md
2. **projectdiscovery/nuclei** — 1.7 · Steady · Security · Go · +1 star measured 2026-10-26, 00:17–02:20 UTC, ≈ 14 by evening
   A vulnerability scanner driven by YAML templates that checks applications, APIs, networks, DNS and cloud configurations for known vulnerabilities. Community-contributed templates mimic real-world exploitation steps to reduce false…
   Full card: https://gitnova.dev/en/r/projectdiscovery/nuclei.md
3. **trhhubsd/ARTEX** — 2.7 · Cooling · Security · Go · +8 stars measured 2026-10-26, 00:14–02:18 UTC, ≈ 44 by evening
   AI autonomous penetration testing system with a Go backend and Next.js frontend: agents explore assets, find vulnerabilities and re-test them. Supports asset sync from ScopeSentry, traffic recording, MCP and human-in-the-loop approvals.
   Full card: https://gitnova.dev/en/r/trhhubsd/ARTEX.md
4. **openai/codex-security** — 1.7 · Steady · Security · TypeScript · +2 stars measured 2026-10-26, 00:18–02:21 UTC, ≈ 14 by evening
   OpenAI's CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in code, and for drafting SECURITY.md security policy.
   Full card: https://gitnova.dev/en/r/openai/codex-security.md

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-10-26 02:26 UTC, updated every 30 minutes.