Introduction

ScanSuite is a security scanning orchestration platform. It takes the things you already have — a repository, a running web application, a range of hosts, a container image — and runs security analysis against them, on self-hosted infrastructure.

Two kinds of engine work side by side. AI agents plan their own work, call tools, and verify what they find against the real system before reporting it. Classic scanners — dozens of open-source and commercial engines — run in parallel in isolated containers. You choose per scan which ones run; the scan forms start with the AI scanners selected, so an AI provider is part of every installation (see AI providers and cost).

What you can point it at

• Source code archives
• Code repositories, including monitored branches that scan on change
• Web application and API URLs
• Host names, IP addresses and domains
• Container image names

ScanSuite selects the appropriate scanners through pre-configured connectors and invokes them with parameters tuned for the target, rather than asking you to assemble a scan profile yourself.

What comes back

Findings are normalised into a single vulnerability record, deduplicated within the scan and against history, and managed in ScanSuite's own Vulnerabilities section — triaged, assigned an owner and due date, tracked to closure and proven with a runnable exploit, all without leaving the platform. Raw scanner reports and structured parsed results are both available for download.

Everything the AI scans find is managed in Vulnerabilities. Most classic scanners can store their findings there too; their full results also go to DefectDojo when a team connects one — which scanners do what is on Set up DefectDojo.

Teams that track remediation in ServiceNow are served differently, and deliberately so: ScanSuite exports a ServiceNow-shaped spreadsheet, and the statuses the ServiceNow workflow sets come back the same way. There is no direct connection, no stored credentials and no outbound calls — the exchange is files, on local terms. See Rescans and fix verification.

How you reach it

Read https://scansuite.eu/documentation/llms.txt and tell me whether ScanSuite can scan <our stack> and which scan types and integrations it would use. Quote the documentation page for each answer.

Every documentation page also has a Copy for AI button, which copies the page as text to paste into any assistant.

Two editions

This documentation describes ScanSuite Teams. Chapters that describe a Teams feature are marked Teams in the sidebar and say so before the first heading. Your licence decides which edition you have; on a server, the first line of ./scansuite version in /opt/scansuite names it.

Start here

New to ScanSuite? Quick start takes you from a fresh server to the report of your first scan. Architecture is background for whoever plans the server and its network.