About

VULNDET is a novel, distributed, and platform-agnostic system designed to proactively detect, monitor, and automatically remediate security vulnerabilities in Open-Source Software (OSS) project dependencies.

It provides a centralized monitoring and management solution for heterogeneous development environments (initially supporting Node.js and Python).

The system operates on a Master-Slave architecture that enables decentralized scanning on various worker nodes while aggregating all findings into a central repository for real-time reporting.

A key innovation is the Automated Patching Mechanism, which uses a sandboxed Docker environment combined with an integrated lightweight LLM to generate, test, and validate stable vulnerability patches before application.

VULNDET achieved 91.8% detection rate and 60.4s average scan time on a custom benchmark dataset.

Tech Stack

PythonNode.jsJavaScript (React)MongoDBDockerGPT-4o-mininpm auditOchronaTrivyAES EncryptionCron