Vet
Ranked 10 of 10 vulnerability scanners by recommenders
Free open-source code review and security scanner that flags risky MCP servers and AI tools, and works well alongside coding agents.
Free open-source code review and security scanner that flags risky MCP servers and AI tools, and works well alongside coding agents.
5 people gave an opinion
- recommend it
- 5
- criticize it
- 0
- approval share
- 100%
Recommended in 2 of 13 months
- November 2025: not recommended
- December 2025: not recommended
- January 2026: not recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: not recommended
- May 2026: not recommended
- June 2026: not recommended
- July 2026: not recommended
- August 2026: not recommended
- September 2026: not recommended
- October 2026: not recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 5 people recommend itNeeds 10 or more, not met.
- Nobody criticizes itNeeds 2 to 1 or better, met.
- Recommended in 2 of 13 monthsNeeds 4 or more, not met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Static analysis flags malicious tools
“Static analysis for the 537 flagged tools (crypto miners, SSH backdoors, .env readers) is exactly the right tool”
Comment from 6 Mar 2026 in “Show HN: Vet – Security registry for 88K+ MCP servers and AI tools” Designed to work with coding agents
“It's an Open Source code review tool, designed to work well with coding agents.”
Comment from 5 Mar 2026 in “Show HN: Vet – Prevent coding agents from making mistakes” Catches issues Codex misses
“Vet often catches issues that codex does not!”
Comment from 5 Mar 2026 in “Show HN: Vet – Prevent coding agents from making mistakes”
Other vulnerability scanners people recommend
The four most recommended other vulnerability scanners, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| OpenAI Codex Security | 21 | 30 | 41% | 4 | — | — |
| govulncheck | 13 | 0 | 100% | 9 | — | Approved |
| AISLE | 11 | 2 | 85% | 5 | — | Approved |
| Trivy | 10 | 23 | 30% | 5 | — | — |
| VetThis page | 5 | 0 | 100% | 2 | — | — |
What people said
4 of the 5 comments that mention it, newest first. Each links to the original comment.
“Static analysis for the 537 flagged tools (crypto miners, SSH backdoors, .env readers) is exactly the right tool”
“Vet often catches issues that codex does not!”
“It's an Open Source code review tool, designed to work well with coding agents.”
“could help with these projects that would rather you use their custom install script instead of complying to distro-specific supply chains”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.