-
Notifications
You must be signed in to change notification settings - Fork 0
Home
homelabforge edited this page Mar 12, 2026
·
5 revisions
Container Security Insights for Your Homelab
VulnForge is a self-hosted dashboard that keeps homelab operators on top of container security. It combines Trivy (for vulnerabilities), a native compliance checker (for CIS Docker Benchmark checks), and Dive (for image efficiency) to surface security issues in one place—all without relying on external SaaS services.
New to VulnForge? Start here:
- 📘 Quick Start - Get VulnForge running in 5 minutes
- 🔧 First-Time Setup - Complete walkthrough for new installations
- 💻 Installation - Comprehensive installation guide (Docker, NAS, bare metal)
Learn about VulnForge's powerful security capabilities:
- 📊 Dashboard - Navigate the VulnForge interface
- 🔍 Vulnerability Scanning - Trivy integration with KEV tagging and CVSS scoring
- ✅ Compliance Monitoring - Native CIS compliance checks with grouped findings
- 🖼️ Image Analysis - Dive layer analysis for efficiency insights
- 🔐 Secret Detection - Scan for exposed credentials with triage
- 📡 Real-time Progress - SSE-powered scan status updates
- 🔔 Notifications - 7 notification services with configurable alerting
Set up VulnForge for your environment:
- 🔐 Authentication - API keys, Basic Auth, Authentik, and custom header providers
- 🗄️ Database Configuration - SQLite WAL mode, backups, and retention policies
- 🎯 Scan Settings - Scheduling, thresholds, parallel scans, and scanner DB management
- 🧪 Advanced Configuration - Scanner offline resilience, KEV checking, false positive patterns
- ⚙️ Environment Variables - Complete environment variable reference
Need assistance?
- ❓ FAQ - Frequently asked questions organized by topic
- 🔍 Troubleshooting - Comprehensive problem-solving guide
- 🔌 API Reference - REST API endpoint documentation
- ⬆️ Upgrading - Version migration guides and breaking changes
- 💻 GitHub: github.com/homelabforge/vulnforge
- 🐛 Issues: Report bugs
- 💬 Discussions: Ask questions
- 💜 Discord: Join the community
- 📖 Changelog: View release history
- 🌐 Deployment: vulnforge.starett.net
VulnForge is a self-hosted container security dashboard that provides:
- ✅ Vulnerability Scanning with Trivy integration
- ✅ KEV Tagging for CISA Known Exploited Vulnerabilities
- ✅ CVSS Scoring with comprehensive vulnerability details
- ✅ Compliance Monitoring using native VulnForge Checker (20 CIS checks)
- ✅ Image Efficiency Analysis using Dive for layer insights and optimization
- ✅ Secret Detection with false-positive triage workflow
- ✅ Real-time Progress via Server-Sent Events (SSE)
- ✅ Smart Notifications through 7 services (ntfy, Gotify, Pushover, Slack, Discord, Telegram, Email)
- ✅ Activity Logging for complete audit trail
- ✅ Data Persistence using SQLite WAL mode
- ✅ Scanner Offline Resilience with stale DB warnings
First time here?
- Install VulnForge → Quick Start
- Run initial scan → First-Time Setup
- Configure notifications → Notifications
- Set up authentication → Authentication
Common tasks:
- How do I schedule scans?
- How do I triage vulnerabilities?
- How do I create false positive patterns?
- How do I monitor KEVs?
- Why aren't my containers being detected?
- Backend: Python 3.14 + FastAPI + SQLAlchemy + aiosqlite
- Frontend: React 19 + TypeScript + Vite 7.3 + TailwindCSS 4.1 + Bun 1.3.4
- Database: SQLite with WAL mode
- Testing: pytest 9.0.2 (backend) + Vitest 3.1 (frontend)
- Scanners: Trivy (vulnerabilities), VulnForge Checker (compliance), Dive (image efficiency)
- Deployment: Docker multi-stage build → GHCR
Want to improve VulnForge?
- Read the Contributing Guide
- Check open Issues
- Join the Discussion
VulnForge - Container security insights for your homelab 🔒