# Vigolium

Vigolium is a vulnerability scanner that combines a fast, deterministic native scan across 317 modules with an agentic scan mode where an AI plans attacks, selects modules, writes custom extensions and triages results against a codebase.

Vigolium is a vulnerability scanner with two complementary modes. Its native scan is a deterministic, multi-phase scan across 317 modules covering content discovery, browser and single-page-app spidering, and active and passive audits, spanning injection, access control, file and path issues, API and protocol problems, framework-specific and cloud or infrastructure vulnerabilities, and out-of-band testing.

Its agentic scan mode audits source code, autonomously planning attacks, selecting scanner modules, generating custom extensions and triaging results, combining deep source-code review with targeted vulnerability scanning. It ships a UI dashboard and a traffic dashboard for reviewing findings, out-of-band testing through interactsh callbacks with automatic payload correlation, and value-aware mutation that classifies parameters by semantic type. It installs from a shell script, npm, a Windows download, Docker, or by building from source with Go and Bun.

Website: https://www.vigolium.com/