Integrate Nikto with Vulnetix. Scan web servers for dangerous files, outdated software, misconfigurations, and known CVEs. Export JSON or XML reports for ingestion into Vulnetix.
Install & scan
$ # Docker (recommended) docker pull ghcr.io/sullo/nikto:latest # Debian/Ubuntu sudo apt install nikto # macOS brew install nikto $ # Docker - write JSON report to current directory docker run --rm -v "$(pwd):/tmp" ghcr.io/sullo/nikto:latest -h https://example.com -o /tmp/nikto-report.json -Format json -nointeractive
Run Nikto in CI
Scan on every push and upload the report as a workflow artifact:
- name: Run Nikto scan
run: |
docker run --rm -v "$(pwd):/tmp" ghcr.io/sullo/nikto:latest -h ${{ secrets.TARGET_URL }} -maxtime 15m -nointeractive -o /tmp/nikto-report.json -Format json
- name: Upload to Vulnetix
run: vulnetix upload --file nikto-report.json
How Vulnetix compares: better together
Vulnetix does not replace Nikto. Keep running it. Vulnetix sits on top of Nikto (and every other scanner you already own) turning disconnected tool outputs into one prioritised, fixable queue.
Nikto is strongest at its core category and also carries features in Network & Vulnerability Scanners, just as Vulnetix spans categories.
| Capability | Vulnetix | Nikto |
|---|---|---|
| Security coverage | ||
| SAST (static code analysis) | ✓ Built-in rules + Semgrep augmentation | ✗ |
| SCA / dependencies | ✓ 40+ ecosystems, transitive graph | ✗ |
| DAST (dynamic testing) | ~ Ingests DAST results; no native dynamic engine | ✓ Actively probes a running web server for dangerous files, CGIs and known issues (6,700+ checks) |
| Container & image | ✓ Image CVEs, base image, Dockerfile | ✗ |
| IaC / misconfiguration | ✓ Terraform, k8s, CloudFormation | ✗ |
| Secret scanning | ✓ 1,000+ rules, source + binary + git history | ✗ Not a secrets scanner; may surface exposed files but does not detect credentials |
| Cloud / CSPM | ✓ Cloud-posture findings, compliance tab | ✗ |
| Mobile (MAST) | ~ Ingests mobile scanner output; no native mobile engine | ✗ |
| License compliance | ✓ SPDX, copyleft/AGPL/SSPL policy | ✗ |
| SBOM generation | ✓ CycloneDX 1.7 + SPDX 2.3, cosign-signable | ✗ |
| Malware / supply-chain | ✓ De-duplicated corpus + install-time firewall (25+ registries) | ✗ |
| Network / infra vuln | ~ Ingests network scanner output; no native network scanner | ~ Infrastructure-level checks for outdated server versions and misconfigurations rather than app logic |
| Fuzzing | ✗ Ingests fuzzing crashes; no native fuzzer | ✗ |
| Pentest / bug bounty | ✗ Ingests pentest/bug-bounty findings; not a testing service | ✗ |
| The Vulnetix orchestration layer | ||
| Cross-scanner dedup & one queue (ASPM) | ✓ Correlates every scanner into one prioritised queue with ownership routing | ✗ |
| Exploit-intel prioritisation | ✓ EPSS, CISA KEV, Coalition ESS, CWSS, Vulnetix LEV | ✗ |
| Reachability analysis | ✓ Tree-sitter + CVEAffected; direct/transitive/semantic | ✗ |
| Versioned VEX + audit trail | ✓ Immutable OpenVEX/CycloneDX, cosign-signable | ✗ |
| Safe Harbour autofix | ✓ Resolves + applies the nearest safe version | ✗ |
| End-of-life policy | ✓ Flags/blocks past-EOL runtimes & packages | ✗ |
| SSVC / risk-based policy | ✓ SSVC v2 + CISA/FedRAMP/Essential-8 presets | ✗ |
✓ full · ~ partial · ✗ not covered
What Nikto does well
- Battle-tested, decades-old open-source web server scanner that checks 6,700+ potentially dangerous files/CGIs and version-specific problems on 270+ servers
- Fast infrastructure-level reconnaissance: flags outdated server software across 1,250+ server versions and common misconfigurations
- Built-in SSL/TLS checks and an easily updatable CSV-format checks database, with plain-text and HTML reporting
- Ubiquitous in pentest workflows (ships in Kali) and trivially scriptable as a CLI
Where Vulnetix adds to it: Nikto actively scans running web servers for known-bad files and outdated versions, a dynamic test Vulnetix does not run. Vulnetix has no native DAST or network-scan engine; it ingests and orchestrates Nikto's output, consolidating it with SAST, SCA, container, IaC and secrets findings into one deduplicated, exploit-intel-prioritised queue (EPSS/KEV/LEV) with versioned VEX and SSVC policy. Best together: Nikto finds server-level exposure, Vulnetix triages and tracks it alongside everything else.
No migration, no rip-and-replace. Nikto keeps doing what it does best; Vulnetix adds the orchestration, exploit-intelligence prioritisation and remediation layer built for the way AppSec works today.
Centralise Nikto results in Vulnetix
Upload Nikto JSON, XML, HTML, CSV output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.