Webhood
Webhood provides a containerized security scanning platform that deploys entirely on the customer's own infrastructure, including fully air-gapped environments. The platform runs via a single docker-compose up command, supports Kubernetes and multiple container engines, and offers a hybrid model with a cloud console and on-premise scanners. A Scanner API enables integration of vulnerability scans into CI/CD pipelines.
- Cybersecurity
- Developer Tools
- Software Only
Funding
Founders
Founder details are not available yet.
Product
Problem
Organizations that need to run security scans on sensitive infrastructure face a dilemma: cloud-based scanning services require sending data and workloads to external parties, which conflicts with compliance requirements, air-gapped deployments, or strict data sovereignty policies. Self-hosted alternatives are often difficult to deploy, require significant configuration effort, and lack integration options for automated workflows.
Solution
Webhood provides a containerized security scanning platform that can be deployed entirely on the customer's own infrastructure, including completely air-gapped environments. The platform is distributed as a set of containers running the backend, frontend, and scanner components, and supports any container engine such as containerd and Podman as well as orchestration tools like Kubernetes. Users can run the entire stack with a single `docker-compose up` command after minimal configuration, making self-hosting accessible to teams with limited DevOps resources. For organizations preferring a cloud management plane, Webhood offers a hybrid model where the management console runs in the cloud while scanners operate on-premise. A Scanner API enables security teams to integrate scanning directly into their existing CI/CD pipelines and other automated workflows.
Target Audience
Primary customers are security teams and DevOps engineers in organizations with strict compliance requirements, including those operating air-gapped or on-premise infrastructure, who need self-hosted vulnerability scanning without external dependencies.
Features
- Container-based architecture supporting multiple container engines including containerd and Podman, as well as Kubernetes orchestration
- One-command deployment via Docker Compose with a minimal configuration requirement of a single scanner token
- Full air-gapped operation support for environments with no external network connectivity
- Multiple deployment topologies: fully on-premise, fully cloud, or hybrid with cloud console and on-premise scanners
- Scanner API for integrating vulnerability scans into custom workflows and CI/CD pipelines
- Built-in user management with CLI-based user creation and dedicated scanner authentication tokens