Deepfence ThreatMapper

Vulnerability Scanning

Deepfence ThreatMapper is a runtime security platform that scans cloud‑native environments for vulnerabilities, exposed secrets and misconfigurations, then visualizes attack paths to prioritize remediation.

Track releases GitHub Website

TypeScript Latest v2.5.8 · 4mo ago Security brief →

Features

Agent‑based inspection of hosts, containers and serverless workloads
Agent‑less cloud configuration scanning via Cloud Scanner tasks
Attack‑path visualization (ThreatGraph) to rank risks by exploit likelihood
Supports Kubernetes, Docker, AWS ECS/Fargate, bare‑metal VMs and major clouds

Security Response History

2 CVEs

CVE	Severity	Disclosed	Patched (this tool)	vs Ecosystem Median
CVE-2025-31125 KEV	medium CVSS 5.3	2025-03-31	Unpatched	Unpatched
CVE-2023-44487 KEV	medium CVSS 7.5	2023-10-10	Unpatched	Unpatched

Recent releases

View all 1 releases →

v2.5.8 New feature 4mo

Notable features

Removed License requirement for Threat Intelligence feeds

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Releases

View all →

Releases per month

Cadence 0.0 / wk

Last release 141d

Tracked 1

Security

Full profile →

CVE composition

Open

1.0

KEV

1.0

Patched

Security score 3.7/10

OpenSSF —

Open CVEs 1

KEV exposure 1

SBOM SECURITY.md

Community

GitHub stars 5,301

Forks 636

Contributors 90d 1

Open issues 143

Open PRs 2

Stars/wk velocity 0.0

About

Stars

5,301

Forks

636

Languages

TypeScript Go Shell

View on GitHub Homepage Live demo Documentation

Install & Platforms

Install via

docker

Platforms

linux

Community & Support

Slack

Similar tools

VulnerableApp

grype

gebalamariusz/cloud-audit

isitsecure

Pompelmi