Evidence-led web assessment, blockchain forensics, and OSINT.
Self-serve tooling and private engagements when you need depth beyond the dashboard.
THE COMPLETE STACK
Diverg is a security and investigation company. We combine web application assessment with blockchain forensics in one platform: passive review of headers, TLS, and policy, then controlled active testing and attack-path analysis with evidence you can act on. Built for engineering teams, investigators, and agents who need defensible results, not noise.
DIVERG OPEN
Goes beyond header checking. Diverg Open passively analyses your security posture then actively probes for real exploitable weaknesses, sending non-destructive test payloads and scoring findings with severity and evidence.
$ diverg-scan https://target.com --type active Passive scan complete, 8 findings Running active probes... [CRITICAL] Reflected XSS, /search?q= [HIGH] SQL Injection, /api/users?id= [MEDIUM] Open Redirect, /login?next= ────────────────────────────────── Attack Paths: → XSS + weak session cookie = Session Hijack via XSS → SQLi + error disclosure = Database Compromise Score: 23/100 Grade: F
ATTACK INTELLIGENCE
Individual findings tell half the story. Attack-path reasoning chains vulnerabilities into exploit narratives, showing how one weakness enables the next, with aggregated severity, likelihood, and prioritized remediation.
DIVERG CHAIN
Multi-modal blockchain forensics across Ethereum, Bitcoin, and Solana. Real-time transaction analysis, entity clustering, fund flow tracing, and risk scoring, integrated into the same agent context as your web security data.
AGENTS
OpenClaw lets your agents issue natural-language security commands: scan this URL, check this wallet, report findings, without writing glue code.
Learn more →CI / CD
Drop a single step into GitHub Actions or GitLab CI. Set a minimum severity, and Diverg blocks risky deploys before they reach production, with machine-readable output for any pipeline.
See the docs →OPEN SOURCE
Diverg Open is fully open source. Audit the probes, extend the attack-path rules, or self-host the whole stack. Community-first, forever.
View on GitHub →GET STARTED
Install the open-source scanner from GitHub or PyPI. PyPI details: Installation.