Sirius
Sirius is an open-source vulnerability scanner that combines network discovery, CVE detection, agent telemetry, and operator-directed triage.
What Sirius is
Sirius is an open-source vulnerability scanner that combines network discovery, CVE detection, agent telemetry, and operator-directed triage. Its Vulnerability Navigator organizes findings by severity, supports CVSS-based filtering and grouped views, and offers export options. The Operator Console provides command execution, command history, and active-agent management. The scanning pipeline integrates Nmap, Naabu, and agent telemetry; dashboards cover service health, infrastructure metrics, vulnerability trends, and centralized logging. Sirius supports Docker Compose deployment in production and development modes. Minimum listed requirements are Docker Engine 20.10.0+ with Compose V2, 4 GB RAM, and 10 GB of free disk space. Supported host systems include Linux, macOS, and Windows through WSL2. REST endpoints on port 9001 use an API key, and the documentation links to an API reference and Go SDK. Sirius Scan is listed as free for self-hosted Docker use. Community help is available through Discord, GitHub Issues, and GitHub Discussions; enterprise priority support is also described. The project repository identifies the license as MIT.
Good
- Combines network discovery, CVE detection, and telemetry.
- Offers CVSS filters and grouped finding views.
- Includes command and active-agent management tools.
- Self-hosted Docker plan is free.
Watch out
- Requires Docker Engine 20.10.0+ with Compose V2.
- Minimum requirements include 4 GB RAM and 10 GB disk.
- Windows support is through WSL2.
Who it suits
Sirius is presented for security teams that want an operator-focused scanner with network discovery, agent telemetry, and triage tools. It may suit teams comfortable with self-hosted Docker deployment and the listed host requirements.
Verdict
Sirius combines scanning, finding review, and operator controls in a self-hosted open-source package. Check the Docker and host requirements before planning a deployment.
Plans and prices
From Sirius's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Sirius Scan | Free | Open-source; free to run anywhere · self-hosted with Docker |
| Sirius Pro | Priced on request | Managed continuous scanning · AI-assisted analysis · Active Directory auditing |
The facts
Each one read from Sirius's own pages, with the date it was checked.
What it does
- API
- Sirius exposes REST endpoints on port 9001 protected by an API key, and the product documentation links to a REST API reference and Go SDK.checked 8 Oct 2026
- Dashboards
- The product provides real-time service health monitoring, infrastructure metrics, vulnerability trends, and centralized logging.checked 8 Oct 2026
- Deployment
- Sirius supports installer-first Docker Compose deployment, with production and development modes.checked 8 Oct 2026
- Intended users
- The product is presented as an operator-focused scanner for security teams that need speed, context, and control.checked 8 Oct 2026
- License
- The source repository identifies the project as MIT licensed.checked 8 Oct 2026
- Operator console
- The Operator Console supports command execution, command history, and management of active agents.checked 8 Oct 2026
- Prioritization
- Its Vulnerability Navigator offers severity distribution, CVSS-based filtering, grouped views, and export options for triage.checked 8 Oct 2026
- Purpose
- Sirius is an open-source vulnerability scanner that combines network discovery, CVE detection, agent telemetry, and operator-driven triage.checked 8 Oct 2026
- Requirements
- The listed minimum requirements are Docker Engine 20.10.0+ with Compose V2, 4 GB RAM, and 10 GB of free disk space.checked 8 Oct 2026
- Scanning stack
- The scanning pipeline integrates Nmap, Naabu, and agent telemetry.checked 8 Oct 2026
- Security guidance
- The maker recommends rotating secrets, restricting exposed ports, using a reverse proxy with TLS, and keeping images updated for production deployments.checked 8 Oct 2026
- Support
- Community support is available through Discord, GitHub Issues, and GitHub Discussions; the support page also describes enterprise priority support with dedicated channels and SLA guarantees.checked 8 Oct 2026
- Supported systems
- The maker lists Linux, macOS, and Windows through WSL2 as supported host systems.checked 8 Oct 2026
The company
- Founded
- 2014checked 28 Sep 2026
- Headquarters
- San Antonio, Texaschecked 28 Sep 2026
- Maker
- Open Security says its operators build and use Sirius and that the company is headquartered in San Antonio.checked 8 Oct 2026
Alternatives to Sirius
- 1
NSAuditor AI
Free planOpen sourceAPILinuxmacOSSelf-hosted8.0From $470 a year - 2
ManageEngine Vulnerability Manager Plus
Free planWebAPILinuxmacOS7.9From $695 a year - 3
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 4
Intruder
Free planWebAPILinuxmacOS7.4Free plan - 5
OpenVAS
Free planWebAPILinuxmacOS7.2From €2,524 a year - 6
Nmap
Free planLinuxmacOSSelf-hostedWindows7.0From $9,980 a month