Sentinel
LIVEA web vuln scanner where every detector is pinned by a known-positive and known-negative test.
Sentinel is an automated web vulnerability scanner covering OWASP Top 10 classes such as injection and security misconfiguration. It maps each finding to a CWE identifier and is backed by a regression suite that keeps its detectors honest.
The problem
A scanner is only as trustworthy as its false-positive and false-negative rate. Most hobby scanners have no way to prove a detector still works after a change — so confidence in the output erodes over time.
The approach
Every detector maps its finding to the corresponding CWE so results point at root cause rather than a symptom. Critically, every detector is pinned by a regression suite giving it both a known-positive and a known-negative case, so a change that breaks detection or introduces noise fails a test instead of shipping silently.