Best Self-hosted Vulnerability Management, Compliance & Audit tools in 2026
4 self-hosted open source alternatives in this category
See also:
Certificates, PKI & TLS AutomationIdentity & Access Management (IAM)Network Security (VPN, Firewall, WAF)Secrets, Passwords & VaultsSSO & Federated Identity (OIDC/SAML)Threat Detection, SIEM & Incident Response4 services found

Bytebase
Database DevSecOps platform for schema change and access governance
Open-source database DevSecOps tool for managing schema migrations, SQL review, audit logging, access control, and data masking across multiple databases.
ClamAV
Open-source antivirus engine for gateway and file scanning
ClamAV is an open-source antivirus toolkit providing a multi-threaded daemon, command-line scanners, and automatic signature updates for mail gateways and file scanning.

Cupdate
Zero-config service that detects and lists outdated container images
Cupdate auto-detects container images in Kubernetes, Docker or Podman, finds newer versions and exposes results via a UI, API and RSS feed with vulnerability metadata.
Secrover
Open-source tool to generate professional HTML security audit reports
Secrover generates human-readable HTML security audit reports for repositories and domains. Scans dependencies, code, and domains; supports scheduling and remote exports.