Cybersecurity
Lynx Vulnerability Scanner
Alpha: on-demand vulnerability scanning of domains you prove you own (Nuclei), with a Premium gate.
lynx_vulnerability_scanner
· v19.0.1.3.0
· Standard
Alpha
What this solves
Lynx Vulnerability Scanner
Alpha. This module is offered on the Alpha release channel only. The scan engine, the ownership proof and the abuse limits are still being hardened, and features listed below as planned are not all in place yet.
On-demand active vulnerability scanning - BBOT for surface enumeration, Nuclei for known-vulnerability detection, httpx for HTTP fingerprinting - with Premium gating and IAP credit metering for actions that incur external cost.
Active vulnerability scanning needs the right balance: included infrastructure costs are bundled with Premium, but actions that charge real money (Shodan API, Nuclei template downloads, off-policy scan windows) belong on a metered IAP credit model. This module is the reference implementation of the hybrid Premium+IAP licensing pattern and ships a working scanner.
Key Features
BBOT surface enumeration - subdomain enumeration, asset discovery, technology detection.
Nuclei template scanning - known-vulnerability detection across web, network, and cloud.
httpx HTTP fingerprinting - tech-stack identification and exposed-service detection.
Premium-gated tier caps - target count, concurrent scans, deep-scan frequency depend on Premium tier.
IAP credit metering - Shodan API queries, Nuclei template-pack downloads, and off-hours overrides charged in IAP credits.
Bundled compute - default scans run on Lynx infrastructure with no marginal cost.
Findings integration - vulnerabilities surface as compliance findings when lynx_compliance is installed.
Integrates With
lynx_licensing and lynx_license_enforcer - Premium gating.
Depends on
Try Lynx Vulnerability Scanner on your team.
Free trial, no credit card. Talk to sales when you're ready.