Yubel
Copyright 2026 Yubel contributors

This product is licensed under the Apache License, Version 2.0 (see LICENSE).

Yubel is an orchestrator: at runtime it invokes third-party dynamic security
testing engines as separate processes. Those engines are NOT included in this
source distribution and are each governed by their own licenses, for example
(non-exhaustive):

  - OWASP ZAP ................ Apache-2.0        https://www.zaproxy.org/
  - Nuclei (ProjectDiscovery)  MIT              https://github.com/projectdiscovery/nuclei
  - katana / httpx ........... MIT              https://github.com/projectdiscovery
  - Nikto .................... GPL-2.0          https://github.com/sullo/nikto
  - Wapiti ................... GPL-2.0          https://wapiti-scanner.github.io/
  - sqlmap ................... GPL-2.0          https://sqlmap.org/
  - dalfox ................... MIT              https://github.com/hahwul/dalfox
  - testssl.sh ............... GPL-2.0          https://testssl.sh/
  - schemathesis ............. MIT              https://github.com/schemathesis/schemathesis
  - graphw00f / graphql-cop .. BSD / MIT        https://github.com/dolevf
  - kube-hunter .............. Apache-2.0       https://github.com/aquasecurity/kube-hunter

When you install engines locally or build the bundled Docker image, you are
responsible for complying with each engine's license. See docs/LANDSCAPE.md for
a broader survey of the ecosystem and per-tool licensing.
