{"version":"0.11.0","built_at":"2026-10-12T01:17:59.374Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","category":{"id":"TR-100.50","name":"Vulnerability & Code Scanning","description":"Finding known weaknesses in infrastructure, images, dependencies and source code before attackers do.","aliases":["Vulnerability Scanner","SAST","SCA","DAST"],"in_scope":["Infrastructure and image scanning","Dependency and license scanning","Static and dynamic application testing"],"capability_ids":["BC-760.40.10","BC-760.50.20","BC-1270.40.40"],"examples":["Tenable","Qualys","Snyk","GitHub Advanced Security","Trivy"],"out_of_scope":[],"domain_id":"TR-100","domain":"Security & Identity","page_url":"https://catalog.mikereams.com/technology/TR-100.50","business_capabilities":[{"id":"BC-760.40.10","name":"Vulnerability Management"},{"id":"BC-760.50.20","name":"Application Security Testing"},{"id":"BC-1270.40.40","name":"Supply Chain Vulnerability Tracking"}],"technology_ids":[]},"domain":{"id":"TR-100","name":"Security & Identity","description":"Proving who and what is acting, protecting systems and data, and spotting attacks early enough to stop them.","category_ids":["TR-100.10","TR-100.20","TR-100.30","TR-100.40","TR-100.50","TR-100.60","TR-100.70"],"page_url":"https://catalog.mikereams.com/technology#TR-100"},"technologies":[]}