AI StackScannerFree preview, no account

Paste an AI stack. See the CVEs.

Drop a docker-compose.yml, a requirements.txt or a package.json. We find the AI components in it (Ollama, vLLM, OpenClaw, Open WebUI, LiteLLM, Langflow, n8n, LangChain, vector databases and more), then check the versions you pinned against every CVE NIST NVD lists for them. The preview is free and needs no account.

Paste your stack

Preview free, no account. Full report free on your first scan.

How it works

Detect
We read image names, Python requirements and npm dependencies, and keep the exact version when you pinned one. A client library (the ollama or qdrant-client packages, for example) is reported as such: its version is not the server's. Nothing is sent anywhere else.
Match
Each component is matched against our copy of NVD (refreshed every 6 hours), and CISA KEV for what is exploited in the wild. A CVE counts only when it is about that exact product, not when its text merely names it.
Check versions
Where NVD publishes version ranges we tell you if your version is affected or already fixed. Where it does not yet, the CVE is marked "check" instead of guessed.
Act
You get the number of CVEs that affect your versions, how many are exploited in the wild, the fixed release of the branch you run, links to each advisory, and a per-component verdict: red, amber or green.

What it costs

The preview is free and needs no account. The full report (CVE ids, fixed versions, advisories) is free on your first scan with an account. After that, €1.99 a scan, €14.99 for 10 or €59.99 for 50. Or unlimited scans plus CVE alerts on your stack with PocketClaw Pro: 7-day trial, then €49 a year or €9 a month.