Find the CVEs that matter:
EPSS + KEV vulnerability scanner
Your tools found 50 CVEs. GeekWala tells you which 3 are actually being exploited. Fix those first. No signup required.
We analyze only package names and versions — your source code is never uploaded or stored.
GeekWala is a dependency vulnerability scanner for npm, PyPI, Maven, Packagist, Go, crates.io, RubyGems and NuGet. It checks your manifests and lockfiles against the OSV database and ranks every CVE by EPSS exploit probability and CISA KEV status, so you fix what attackers are actually exploiting first. Your first scan needs no signup.
Powered by OSV (200,000+ vulnerabilities) · EPSS · CISA KEV
From manifest to EPSS + CISA KEV ranked CVEs.
Three steps. The third one is the one that matters: every CVE ranked by EPSS exploitation probability and KEV status, so you fix what's actually exploited.
Upload dependencies
Paste your package.json, requirements.txt, composer.json, or other dependency files
Instant analysis
We scan against the OSV database with 200,000+ known vulnerabilities
Know what to fix first
See what's being exploited right now and what's likely to be exploited soon. The most dangerous vulnerabilities go to the top.
7-day free Pro trial included — no credit card required
Not all vulnerabilities are equal
Most scanners give you a list of 50 CVEs. GeekWala tells you which 3 to fix today.
Sorted by CVSS severity
50 CVEs sorted by severity — the 3 being exploited are somewhere in the 47 more. Where do you start?
Ranked by GeekWala
Fix these 3 today. Schedule the rest for next sprint.
Illustrative 50-CVE scan. The CVEs shown are real; their CVSS, EPSS and KEV values are as of October 1, 2026.
Some commercial scanners (like Snyk) also factor in EPSS inside a proprietary risk score — GeekWala makes exploitation-probability ranking the default, self-serve, and transparent, not buried behind an enterprise sales process.
See it in action
Watch GeekWala scan a sample package.json, enrich with EPSS and KEV data, and prioritize the results.
Want to keep your scan results?
Without an account you can scan up to 10 packages at a time, 3 times a day, and each result link expires after 30 days. A free account saves up to 5 projects with 200 tracked packages between them, and keeps 30 days of history.
- Save & revisit scan history
- 200 tracked packages in total
- Up to 5 saved projects
Powered by trusted vulnerability intelligence
Everything you need for dependency security
From quick anonymous scans to comprehensive monitoring, GeekWala has you covered.
For Quick Security Checks
Smart prioritization
GeekWala ranks vulnerabilities by real-world exploit data — EPSS prediction scores and CISA known exploits — so you fix what matters first.
Instant vulnerability scan
Paste your dependency file and get instant security analysis against the OSV database.
Privacy first
Anonymous scans need no account. Results are kept for 30 days so your permalink works, then deleted automatically. Package names only — no source code.
For Ongoing Monitoring
GitHub integrationPro
Connect your repositories for automated scanning and continuous monitoring.
Vulnerability alertsPro
Track packages in your projects and get email alerts when scans find new vulnerabilities.
Developer APIPro
Integrate security scanning into your CI/CD pipeline with our REST API and webhooks.
Built with security and privacy in mind
We analyze only package names and versions — your source code is never uploaded or stored.
Stop guessing. Start prioritizing.
Scan and track your dependencies free — up to 200 packages across 5 projects. No credit card required.