Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
Tsunami addresses the need for reliable vulnerability detection by focusing on identifying high severity issues while minimizing false positives. The tool operates through a plugin-based architecture that separates core scanning functionality from detection logic, allowing users to enable only the vulnerability checks relevant to their infrastructure and extend capabilities through custom plugins.
Organizations should adopt Tsunami when they need a flexible scanning solution that can be tailored to specific security requirements without running unnecessary checks. The tool suits teams that want to build custom detection capabilities or integrate scanning into automated security workflows. The plugin system means that basic scanning functionality depends on selecting and configuring appropriate plugins from the available ecosystem, so users should evaluate whether existing plugins cover their target vulnerabilities before deployment.
The project maintains active development with regular builds tracked through continuous integration. The codebase is written in Java and accepts community contributions through a documented process. Documentation is available to guide both initial setup and plugin development, supporting users who want to extend the scanner's capabilities.
