Most scanners answer the question "what does the inventory say is installed?" ZTVS answers "what is actually here, and can I prove it?"
That difference is the whole design. Package manifests drift, agents self-report, and asset inventories describe the machine somebody built six months ago. ZTVS treats all three as claims to be verified, not facts to be trusted.
What it does#
- Resolves what is genuinely present in an artefact — filesystem, binaries, package databases — rather than reading a manifest and believing it
- Matches findings against vulnerability data with the evidence that produced them attached
- Emits results that can be checked by someone who does not trust the scanner either
Where to start#
| If you want to… | Go to |
|---|---|
| Run your first scan | Tutorial |
| Solve a specific problem | How-to guides |
| Look up a flag or field | Reference |
| Understand why it works this way | Explanation |
New to ZTVS? Start with the tutorial. It takes about ten minutes and ends with a scan you can actually read.