Vulnrepo

A client-side, privacy-first vulnerability report manager for security professionals. All data is encrypted and stored locally in your browser — nothing is sent to any server by default. Live app: https://vulnrepo.com/ | Dev branch: https://dev.vulnrepo.com/ - Client-side encryption — reports are encrypted in the browser before storage; no backend required - Issue templates — create and reuse custom vulnerability templates; import from CVE, CWE, MITRE ATT&CK, and PCI DSS - Scanner imports — import findings directly from popular security tools (see Supported Import Sources) - Multiple export formats — TXT, HTML, DOCX; generate PDF via browser print - Encrypted HTML export — share an AES-encrypted, self-contained HTML report - File attachments — attach screenshots, tool output, or any file; SHA-256 checksum is computed automatically - Changelog — all significant report changes are versioned and logged automatically - Issue export — export issues to SARIF 2.1.0, Atlassian Jira, or as a portable encrypted file - Report sharing — share a full encrypted report with collaborators - Report profiles — save reusable report configurations (logo, researcher info, theme, CSS) - Template customization — edit the HTML report template and CSS directly in the app - Methodology tools — built-in checklists for OWASP ASVS 4, PCI DSS 4, and The Bug Hunter's Methodology (TBHM) - CVE search — query the NIST NVD database and pull CVE details into your report - Report history — automatic versioned snapshots of every save - Issue merge — merge duplicate or related issues - Advanced filter — filter and search issues by severity, status, tags, CVE, CVSS, and more - Bug bounty list — reference list of bug bounty programs - AI / LLM integration — connect a local Ollama model for AI-assisted report writing (see AI / LLM Integration) - Optional backend — store encrypted reports on your own server via the REST API (see API Integration) Vulnrepo is the open-source project kac89/vulnrepo (https://github.com/kac89/vulnrepo) by kac89, released under Apache-2.0. Ion packages it unmodified from commit b1042be2abae, adding only a manifest, an icon and a storage compatibility script.

Written by kac89, published to Oikou by Ben Grande.

• ★ 583 stars on GitHub
• Licence: Apache-2.0
• Built from commit b1042be2abae

View the repository on GitHub

Not rated. Nobody has said who this app is suitable for, so Personal Clouds and the Oikou app treat it as 18+.

Internet

It asks to reach these hosts, and no others:

• services.nvd.nist.gov
• cve.vulnrepo.com
• vulnrepo.com
• api.github.com

Personal Cloud tools

• Keep a database of its own on your Personal Cloud ion.db

Notifications

It does not send push notifications.

Storage

Up to 16 MB on your Personal Cloud.

Sign in to add this web app to a Personal Cloud of yours. It runs there, on your own computer, and you open it from there; nothing is installed on your phone.

Sign in to add