{"slug": "show-hn-professional-security-testing-platform", "title": "Show HN: Professional Security Testing Platform", "summary": "BugBounty Arsenal, a free, open-source web application security scanner, runs 53 detectors across reconnaissance, injection, SSRF, XSS, authentication and more, with an AI advisor that explains fixes and reproductions for authorized testing. It includes scheduled scans, CI/CD gating via GitHub Action and CLI, SARIF export, attack-surface tracking, and a triage workflow, deployable with a single docker compose up.", "body_md": "# BugBounty Arsenal — free, open-source web security scanner\n\nBugBounty Arsenal is a free, open-source web application security scanner for bug bounty hunters and small teams. It runs 53 detectors across reconnaissance, injection, SSRF, XSS, authentication and more, then an AI advisor explains how to fix each finding — and, for authorized testing, how to reproduce it. Includes scheduled scans that alert only on new findings, CI/CD gating with a GitHub Action and CLI, SARIF export for GitHub Code Scanning, attack-surface tracking and a triage workflow. Self-hostable with one docker compose up.", "url": "https://wpnews.pro/news/show-hn-professional-security-testing-platform", "canonical_source": "https://bugbounty-arsenal.net/", "published_at": "2026-09-04 09:08:56+00:00", "updated_at": "2026-09-04 09:53:07.361972+00:00", "lang": "en", "topics": ["ai-tools", "developer-tools"], "entities": ["BugBounty Arsenal", "GitHub Action"], "alternates": {"html": "https://wpnews.pro/news/show-hn-professional-security-testing-platform", "markdown": "https://wpnews.pro/news/show-hn-professional-security-testing-platform.md", "text": "https://wpnews.pro/news/show-hn-professional-security-testing-platform.txt", "jsonld": "https://wpnews.pro/news/show-hn-professional-security-testing-platform.jsonld"}}