Abstract

ArcherySec is an open-source vulnerability assessment and automation tool which helps developers and pentesters to perform scans and manage vulnerabilities. ArcherySec uses popular open-source tools to perform comprehensive scanning for web applications and networks. It also performs web application dynamic authenticated scanning and covers the whole application by using selenium. The developers can also utilize the tool for the implementation of their DevOps CI/CD environment.

Overview of the tool

• Perform web and network vulnerability scanning using open-source tools.
• Correlates and collaborates all raw scans data, shows them in a consolidated manner.
• Multi-user role-based accounts admin, analyst & viewer
• Policy-based CI/CD integration
• Perform authenticated web scanning.
• Perform web application scanning using selenium.
• Vulnerability management.
• Enable REST APIs for developers to perform scanning and vulnerability management.
• JIRA Ticketing System.
• Periodic scans.
• Useful for DevOps teams for vulnerability management