1. Problem / Pain

Security teams run several scanners (SAST, DAST, container, infra) + periodic pentests that arrive as PDFs or CSVs.
Typical pain points mentioned in Reddit & vendor blogs:

• Duplicated findings across tools → alert-fatigue.
• No single source of truth to assign owners / track SLA.
• Manual copy-paste into reports (C-suite, auditors).
• Pentest PDFs are ‘dead’ – need to inject into daily workflow.

2. Evidence of Interest

Forums

• Reddit r/AskNetsec – “Building a vulnerability management dashboard” (Apr 2022, link above) – 68 upvotes, 42 comments asking for OSS or cheap solutions.
• r/cybersecurity “What tools do you use for vulnerability management & reporting?” (Aug 2024) – 120 comments, many complain about duplicate findings & tracking SLAs.
• Multiple threads (links in search results) asking “best vulnerability management platform”, “automating vulnerability management”, etc.

HackerNews thread supplied by user

HN item 43337754 reached front page (score 200+, 100+ comments). Commenters up-voted concept of ingesting Nessus/Burp/Pentest PDFs → dedupe → single dashboard. Several asked for pricing, integrations, SOC-2 support – signal...