Sirius
San Antonio, Texas
What it is
Sirius is an open-source vulnerability scanner that combines network discovery, CVE detection, agent telemetry, and operator-led triage. Its Vulnerability Navigator organizes findings by severity, supports CVSS-based filters and grouped views, and offers export options for review. The Operator Console provides command execution, command history, and active-agent management. The scanning pipeline integrates Nmap, Naabu, and agent telemetry; dashboards cover service health, infrastructure metrics, vulnerability trends, and centralized logging. Sirius can be deployed with Docker Compose in production or development modes. The listed minimum requirements are Docker Engine 20.10.0+ with Compose V2, 4 GB RAM, and 10 GB of free disk space. Supported host systems are Linux, macOS, and Windows through WSL2. REST endpoints on port 9001 require an API key, and the documentation links to an API reference and Go SDK. Sirius Scan is free as a self-hosted Docker deployment. Community support is available through Discord, GitHub Issues, and GitHub Discussions; enterprise priority support is also described. The repository identifies the project as MIT licensed.
For and against
For
- Combines network discovery, CVE detection, and agent telemetry.
- Navigator supports severity and CVSS-based triage.
- Dashboards track service health and vulnerability trends.
- Free self-hosted Docker deployment.
- REST API and Go SDK are documented.
Against
- Requires Docker Engine 20.10.0+ with Compose V2.
- Minimum listed requirements include 4 GB RAM and 10 GB disk.
- Production guidance recommends rotating secrets and restricting exposed ports.
The verdict
Sirius combines scanning, agent management, and triage tools in a self-hosted package. Its Docker and host requirements, along with production security guidance, are worth reviewing before deployment.
Who it suits
Sirius suits security teams that want an operator-focused scanner and can run a self-hosted Docker deployment. Its listed host options include Linux, macOS, and Windows through WSL2.
Plans and prices
Sirius Scan
Open-source; free to run anywhere · self-hosted with Docker
Read 8 Oct 2026 · opensecurity.com
Sirius Pro
Managed continuous scanning · AI-assisted analysis · Active Directory auditing
Read 8 Oct 2026 · opensecurity.com
On the record
- API
- Sirius exposes REST endpoints on port 9001 protected by an API key, and the product documentation links to a REST API reference and Go SDK.github.com · read 8 Oct 2026
- Dashboards
- The product provides real-time service health monitoring, infrastructure metrics, vulnerability trends, and centralized logging.sirius.opensecurity.com · read 8 Oct 2026
- Deployment
- Sirius supports installer-first Docker Compose deployment, with production and development modes.sirius.opensecurity.com · read 8 Oct 2026
- Intended users
- The product is presented as an operator-focused scanner for security teams that need speed, context, and control.sirius.opensecurity.com · read 8 Oct 2026
- License
- The source repository identifies the project as MIT licensed.github.com · read 8 Oct 2026
- Maker
- Open Security says its operators build and use Sirius and that the company is headquartered in San Antonio.opensecurity.com · read 8 Oct 2026
- Operator console
- The Operator Console supports command execution, command history, and management of active agents.sirius.opensecurity.com · read 8 Oct 2026
- Prioritization
- Its Vulnerability Navigator offers severity distribution, CVSS-based filtering, grouped views, and export options for triage.sirius.opensecurity.com · read 8 Oct 2026
- Purpose
- Sirius is an open-source vulnerability scanner that combines network discovery, CVE detection, agent telemetry, and operator-driven triage.opensecurity.com · read 8 Oct 2026
- Requirements
- The listed minimum requirements are Docker Engine 20.10.0+ with Compose V2, 4 GB RAM, and 10 GB of free disk space.sirius.opensecurity.com · read 8 Oct 2026
- Scanning stack
- The scanning pipeline integrates Nmap, Naabu, and agent telemetry.sirius.opensecurity.com · read 8 Oct 2026
- Security guidance
- The maker recommends rotating secrets, restricting exposed ports, using a reverse proxy with TLS, and keeping images updated for production deployments.github.com · read 8 Oct 2026
- Support
- Community support is available through Discord, GitHub Issues, and GitHub Discussions; the support page also describes enterprise priority support with dedicated channels and SLA guarantees.sirius.opensecurity.com · read 8 Oct 2026
- Supported systems
- The maker lists Linux, macOS, and Windows through WSL2 as supported host systems.sirius.opensecurity.com · read 8 Oct 2026
