Skip to content
SPECIFICTION
Get listed

Sirius

opensecurity.com

Free plan WebWindowsmacOSLinuxAPISelf-hosted
Visit opensecurity.com
Spec score 7.9 #13 of 35 in Vulnerability Scanning Software

What it is

Sirius is an open-source vulnerability scanner for security teams that want operator control over discovery and triage. It combines network discovery, CVE detection, agent telemetry, and scanning through Nmap and Naabu. The Vulnerability Navigator provides severity groupings, CVSS-based filters, and export options; the Operator Console supports command execution, command history, and active-agent management. Dashboards show service health, infrastructure metrics, vulnerability trends, and centralized logs. Sirius can run in production or development mode through Docker Compose. Its listed minimum requirements are Docker Engine 20.10.0+ with Compose V2, 4 GB RAM, and 10 GB of free disk space. Supported host systems are Linux, macOS, and Windows through WSL2. REST endpoints on port 9001 use an API key, with documentation linking to an API reference and Go SDK. The Sirius Scan plan is free for self-hosted Docker use. Community support is available through Discord, GitHub Issues, and GitHub Discussions; the support page also describes enterprise priority support.

Spec sheet

Purpose
Sirius is an open-source vulnerability scanner that combines network discovery, CVE detection, agent telemetry, and operator-driven triage.Read 8 Oct 2026 · opensecurity.com
Intended users
The product is presented as an operator-focused scanner for security teams that need speed, context, and control.Read 8 Oct 2026 · sirius.opensecurity.com
Deployment
Sirius supports installer-first Docker Compose deployment, with production and development modes.Read 8 Oct 2026 · sirius.opensecurity.com
API
Sirius exposes REST endpoints on port 9001 protected by an API key, and the product documentation links to a REST API reference and Go SDK.Read 8 Oct 2026 · github.com
Support
Community support is available through Discord, GitHub Issues, and GitHub Discussions; the support page also describes enterprise priority support with dedicated channels and SLA guarantees.Read 8 Oct 2026 · sirius.opensecurity.com
License
The source repository identifies the project as MIT licensed.Read 8 Oct 2026 · github.com
Headquarters
San Antonio, TexasRead 28 Sep 2026 · opensecurity.com
Founded
2014Read 28 Sep 2026 · opensecurity.com
Maker
Open Security says its operators build and use Sirius and that the company is headquartered in San Antonio.Read 8 Oct 2026 · opensecurity.com
Dashboards
The product provides real-time service health monitoring, infrastructure metrics, vulnerability trends, and centralized logging.Read 8 Oct 2026 · sirius.opensecurity.com
Operator console
The Operator Console supports command execution, command history, and management of active agents.Read 8 Oct 2026 · sirius.opensecurity.com
Prioritization
Its Vulnerability Navigator offers severity distribution, CVSS-based filtering, grouped views, and export options for triage.Read 8 Oct 2026 · sirius.opensecurity.com
Requirements
The listed minimum requirements are Docker Engine 20.10.0+ with Compose V2, 4 GB RAM, and 10 GB of free disk space.Read 8 Oct 2026 · sirius.opensecurity.com
Scanning stack
The scanning pipeline integrates Nmap, Naabu, and agent telemetry.Read 8 Oct 2026 · sirius.opensecurity.com
Security guidance
The maker recommends rotating secrets, restricting exposed ports, using a reverse proxy with TLS, and keeping images updated for production deployments.Read 8 Oct 2026 · github.com
Supported systems
The maker lists Linux, macOS, and Windows through WSL2 as supported host systems.Read 8 Oct 2026 · sirius.opensecurity.com

Plans and prices

Sirius Scan Free Open-source; free to run anywhere · self-hosted with Docker Read 8 Oct 2026 · opensecurity.com
Sirius Pro Priced on request Managed continuous scanning · AI-assisted analysis · Active Directory auditing Read 8 Oct 2026 · opensecurity.com

Every Sirius plan and price →

Strong points and limits

Strong points

  • Open-source and free to run anywhere.
  • Combines network discovery, CVE detection, and agent telemetry.
  • Navigator supports CVSS filtering and exports.
  • Includes dashboards for service health and vulnerability trends.

Limits

  • Requires Docker Engine 20.10.0+ with Compose V2.
  • Minimum listed requirements include 4 GB RAM and 10 GB disk.
  • Production security guidance includes restricting ports and rotating secrets.

Who it suits

Sirius is presented for security teams that need an operator-focused scanner with control over discovery, agents, and triage. It suits teams able to deploy and maintain a self-hosted Docker service.

Verdict

Sirius offers scanning, agent management, and triage tools in a self-hosted package. Check the Docker and hardware requirements, and follow the maker’s production security guidance before deployment.

Where Specifiction places it

Alternatives to SiriusAll alternatives →