An automated security assessment tool that bridges the gap between raw Nmap scanning and actionable intelligence using AI-powered analysis and professional PDF reporting.
AutoVulnScanner automates the full vulnerability assessment workflow — from network discovery to executive reporting. It runs Nmap service-version detection, feeds the results to OpenAI for risk interpretation, and generates a stakeholder-ready PDF report with severity classifications and remediation guidance.
┌──────────────┐ ┌──────────────────┐ ┌─────────────────┐
│ │ │ │ │ │
│ Nmap Scan │─────►│ AI Analysis │─────►│ PDF Report │
│ (-sV) │ │ (GPT-4/3.5) │ │ Generation │
│ │ │ │ │ │
│ Port & Svc │ │ Risk Assessment │ │ Executive-Ready │
│ Discovery │ │ Plain English │ │ Deliverable │
│ │ │ Remediation │ │ │
└──────────────┘ └──────────────────┘ └─────────────────┘
| Feature | Description |
|---|---|
| Automated Scanning | Executes Nmap service-version detection (-sV) with automatic port discovery |
| AI-Powered Analysis | GPT-4/3.5 interprets scan results and explains risks in plain English |
| Risk Prioritization | Automatically assigns severity levels (Low to Critical) based on service exposure |
| Executive Reporting | Generates professional PDF reports ready for stakeholders |
| Requirement | Installation |
|---|---|
| Python 3.9+ | python.org |
| Nmap | brew install nmap (macOS) / sudo apt install nmap (Linux) / nmap.org (Windows) |
| OpenAI API Key | platform.openai.com |
git clone https://github.com/sedat4ras/AutoVulnScanner.git
cd AutoVulnScanner
python -m venv venv && source venv/bin/activate # macOS/Linux
# python -m venv venv && .\venv\Scripts\activate # Windows
pip install -r requirements.txtCreate a .env file in the project root:
OPENAI_API_KEY=your_actual_key_here
python main.pyEnter the target when prompted:
- Single IP:
192.168.1.5 - Localhost:
127.0.0.1 - Domain:
scanme.nmap.org(Nmap's authorized test server)
For a detailed look at the AI analysis and professional formatting, examine the Sample PDF Report included in this repository.
This tool is intended for authorized security assessments only. Always obtain explicit written permission before scanning any network or system. Unauthorized scanning may violate applicable laws and regulations.
GitHub: sedat4ras | Email: [email protected]
