Intruder vs Sirius
Intruder
intruder.ioSirius
opensecurity.comSide by side
| Figure | Intruder | Sirius |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 4 | 2 |
| Spec score · Vulnerability Scanning Software | 9.0 (#3) | 7.9 (#13) |
| API | The REST API manages targets, views issues, starts scans and retrieves results; access is restricted to administrator users and API tokens are account-wide. | Sirius exposes REST endpoints on port 9001 protected by an API key, and the product documentation links to a REST API reference and Go SDK. |
| Prioritization | Intruder prioritizes findings by severity and exploit likelihood and provides remediation guidance. | Its Vulnerability Navigator offers severity distribution, CVSS-based filtering, grouped views, and export options for triage. |
| Support | Intruder offers live chat support for all customers and dedicated security professionals for Enterprise customers. | Community support is available through Discord, GitHub Issues, and GitHub Discussions; the support page also describes enterprise priority support with dedicated channels and SLA guarantees. |
Plans
Intruder
- FreeFree
- CloudPrice not published
- EnterprisePriced on request
- ProPrice not published
In their own words
Intruder
Intruder provides continuous vulnerability scanning for infrastructure, web applications, APIs, and cloud environments, with issue prioritization and remediation guidance. It ranks issues using exploit likelihood and real-world threat intelligence, while emerging-threat scans check systems within hours of new risks appearing. Cloud scans assess AWS, Microsoft Azure, and Google Cloud environments for vulnerabilities, misconfigurations, and exposures. Authenticated dynamic application testing covers customer-controlled web apps and APIs, including OWASP Top 10 checks. Supported targets also include external IP addresses, domains, subdomains, internal Windows, macOS, and Linux devices, and container images. Integrations include cloud platforms, code hosts, issue trackers, chat services, Vanta, and Drata. Its API can manage targets, view issues, start scans, and retrieve results. A free plan and 14-day trial are listed. The free plan covers five infrastructure targets and weekly external scans, but does not include web apps. Internal target scanning is available only on Pro and Enterprise plans. All customers receive live chat support.
Sirius
Sirius is an open-source vulnerability scanner for security teams that want operator control over discovery and triage. It combines network discovery, CVE detection, agent telemetry, and scanning through Nmap and Naabu. The Vulnerability Navigator provides severity groupings, CVSS-based filters, and export options; the Operator Console supports command execution, command history, and active-agent management. Dashboards show service health, infrastructure metrics, vulnerability trends, and centralized logs. Sirius can run in production or development mode through Docker Compose. Its listed minimum requirements are Docker Engine 20.10.0+ with Compose V2, 4 GB RAM, and 10 GB of free disk space. Supported host systems are Linux, macOS, and Windows through WSL2. REST endpoints on port 9001 use an API key, with documentation linking to an API reference and Go SDK. The Sirius Scan plan is free for self-hosted Docker use. Community support is available through Discord, GitHub Issues, and GitHub Discussions; the support page also describes enterprise priority support.