Introducing Flan Scan: Cloudflare’s Lightweight Network Vulnerability Scanner

What this post added

Introduced Flan Scan, an open-source, lightweight network vulnerability scanner built as a wrapper around Nmap. Flan Scan enhances Nmap by integrating with the 'vulners' script to map detected services to CVEs, packaging Nmap into a Docker container for easy deployment, and enabling results to be pushed to cloud storage (GCS/S3). It also generates actionable reports structured around vulnerable services rather than individual IP addresses, improving clarity and remediation efforts. Flan Scan was used to identify and prioritize updates for outdated Apache versions on FreeIPA nodes and a leftover PostgreSQL instance.