cff-version: 1.2.0
message: "Please cite OpenVAPT if you use it or any of its material in a research paper, thesis, coursework, presentation, poster, academic project or any other work, and give the version you used. Copying, quoting, adapting or presenting OpenVAPT material requires credit under section 5.4 of LICENSE. See CITING.md for every citation style."
title: "OpenVAPT: An Open Academic Vulnerability Assessment Tool"
abstract: "OpenVAPT is academic, non-commercial, source-available software for learning vulnerability assessment. It runs read-only server, network-exposure and local website checks on machines the user owns or controls, documents and cites every check to its public source, produces signed reports, and includes a free Academy with a simulated lab. It is built by AI Cybersecurity Engineers under the direction of the project owner and is used entirely at the user's own risk."
type: software
authors:
  - name: "OpenVAPT"
    website: "https://openvapt.com"
repository-code: "https://github.com/OpenVAPT/openvapt"
url: "https://openvapt.com"
# The licence is not on the SPDX list, so CFF 1.2.0 allows only license-url here (schema: license is an SPDX enum).
license-url: "https://github.com/OpenVAPT/openvapt/blob/main/LICENSE"
version: "0.1.0-alpha.6"
date-released: "2026-10-15"
keywords:
  - vulnerability assessment
  - security education
  - linux hardening
  - web security
  - network exposure
  - signed reports
  - cybersecurity academy
  - NIST SP 800-115