Tsunami is a general purpose network security scanner

Apache licensed, comes from Google.

And written in Java.

Interesting looking project, although at the moment it's only useful for a small range of issues.

One of the harder parts of vulnerability scanning is building and maintaining the plugin database. Nessus, which is one of the older and better known VA tools has 10's of thousands of plugins...

There are other, open source, vulnerability scanning tools available as well like OpenVAS https://www.openvas.org/

Nessus used to be FOSS (before 2005). OpenVAS is a Nessus fork.

The name (“Tsunami”) and the description (“network scanner”) reminded me of the architecturally very innovative “Paketto Keiretsu[1]” from the very early 2000s. Very fond memories. I remember that the speed it achieved compared to (say) nmap was truly astounding.

[1] http://freshmeat.sourceforge.net/projects/paketto/

What data flows back to Google from an internal Tsunami server?

we need another scanner for that.