Introducing Flan Scan: Cloudflare’s Lightweight Network Vulnerability Scanner

Introduced Flan Scan, an open-source network vulnerability scanner built as a wrapper around Nmap. Key features include easy deployment via Docker, runtime configuration, pushing scan results to cloud storage (GCS/S3), and generating actionable reports structured around vulnerable services rather than individual IP addresses. The default scan includes ICMP ping, SYN scan, and service detection with banner grabbing, augmented by the 'vulners' NSE script for CVE mapping. Reports are generated in LaTeX for PDF conversion. Flan Scan was used to identify outdated Apache versions on FreeIPA nodes and a leftover vulnerable PostgreSQL instance, driving prioritized updates and contributing to a larger vulnerability management program.