ai-security

VulnSightAI | Enterprise Security Software

AI-powered attack surface mapping & high-throughput vulnerability triage engine built in Go (1.22+) and TypeScript.

July 9, 2025

#Go (1.22+)#TypeScript#AI Vulnerability Triage#AST Static Analysis#Red Teaming

ai-securitySTATUS: activeLICENSE: MIT

View Source Code↗

Go (1.22+)TypeScriptAI Vulnerability TriageAST Static AnalysisRed Teaming

product-sandbox@cyberfact:~

● INTERACTIVE CLI PREVIEW

$./vulnsightai --target target.internal --threads 50 --ai-triage

[+] INITIATING HIGH-THROUGHPUT RECON PIPELINE (Go 1.22+)...
[+] Target: target.internal (Worker pool: 50 threads)
[+] 10.0.4.12:8080   -> HTTP/1.1 200 OK (Exposed Actuator Endpoint)
[+] 10.0.4.15:443    -> TLS 1.3 (Weak cipher suite detected: ECDHE-RSA-DES)
[+] Running AI Vulnerability Triage Module...
[*] TRIAGE REPORT: 1 High Risk, 2 Medium Risk findings synthesized.
[✔] Assessment complete. Report generated -> report.json

$./vulnsightai --version

VulnSightAI v2.1.0-release (go1.22.4 linux/amd64)
Author: Saket Kumar Choudhary (@pingsaketchoudhary)
License: MIT Open Source

// SYSTEM ARCHITECTURE VECTOR ILLUSTRATION

SVG VECTOR ENGINE

Executive Overview

VulnSightAI is an enterprise-grade security reconnaissance and vulnerability assessment framework engineered in Go (1.22+) and TypeScript. Built to address modern microservice attack surfaces and AI model integration risks, VulnSightAI automates target discovery, AST-level code inspection, and risk scoring in offensive red teaming engagements.

Core Product Capabilities

1. Concurrent Go Recon Pipeline

Engineered with native Go goroutines and worker pools, VulnSightAI executes non-blocking TCP/UDP port sweeps, HTTP header security audits, and DNS subdomain enumeration across large IP CIDR blocks at tens of thousands of requests per second.

2. AI-Driven Vulnerability Triage

Combines deterministic AST pattern matching with LLM risk synthesis to filter out false positives. Instead of raw vulnerability spam, VulnSightAI outputs contextualized CVSS risk scores, proof-of-concept attack vectors, and prioritized remediation guidance.

3. Attack Surface Graphing

Generates real-time attack graph visual representations mapping exposed endpoints, outdated TLS ciphers, misconfigured CORS headers, and unauthenticated API endpoints.

Quickstart & Installation

# 1. Clone the official repository from GitHub
git clone https://github.com/pingsaketchoudhary/VulnSightAI.git
cd VulnSightAI

# 2. Build the high-performance binary
go build -ldflags="-s -w" -o vulnsightai ./cmd/vulnsightai

# 3. Execute target assessment
./vulnsightai --target example.com --threads 50 --ai-triage --format json --output report.json

Architectural Workflow

graph TD
    Target[Target Asset / CIDR] --> Recon[Go Concurrency Engine]
    Recon --> Probe[Port & HTTP Probing]
    Probe --> AST[AST Static Analysis]
    AST --> Scoring[AI Vulnerability Triage]
    Scoring --> Report[Structured JSON / HTML Report]

Technical Specifications

Property	Value
Engine Runtime	Go 1.22+ Compiled Native Binary
Concurrency Model	Goroutine Worker Pool (Configurable 1–500 Threads)
Supported Protocols	HTTP/1.1, HTTP/2, HTTPS, DNS, TCP, TLS 1.3
Export Formats	Structured JSON, Markdown, HTML Executive Summary
License	Open Source (MIT License)