Security assessment platform

King Malhare - know your weaknesses before attackers do.

King Malhare is a self-hosted vulnerability assessment and penetration testing platform for authorized testing. It combines asset inventory, written authorization, real scanner workers, evidence, findings, remediation guidance and client-ready reports.

Real security tools

Nmap, Nuclei, Burp Suite, OWASP ZAP, Nikto, SQLMap, ffuf, Gobuster, WhatWeb, WAFW00F, httpx, Subfinder, SSLyze, Grype, Syft, Semgrep, Gitleaks, tfsec, Trivy, Prowler, ScoutSuite and Checkov. Missing tools are reported as unavailable, never simulated.

From scope to remediation

Every assessment is tied to a recorded authorization. Findings include evidence, CVE/CWE identifiers, technical and business impact and a concrete remediation recommendation. Reports preserve the scope, methodology and evidence.

Sign in or create a workspace. Read the API documentation or the developer reference.