Documentation

Everything you need to detect cross-service vulnerabilities in your microservice architecture.

Quick Start

Install the CLI and run your first scan in three commands.

npx vulngraph init

Set up your first cross-service scan in under 5 minutes. Covers project creation, spec import, and your first vulnerability report.

Install the VulnGraph CLI via npm, Homebrew, or as a standalone binary. Docker image available for CI environments.

Configure vulngraph.json: service specs, message queues, databases, custom rules, output formats, and severity thresholds.

Complete reference for all CLI commands: scan, init, validate, graph, export, and diff.

Add VulnGraph to your CI/CD pipeline with our official GitHub Action. Block PRs that introduce cross-service vulnerabilities.

REST API for programmatic access. Trigger scans, retrieve results, and manage projects from your own tooling.

How VulnGraph builds unified call graphs, propagates taint across boundaries, and identifies cross-service vulnerability patterns.