Blog

Engineering

Deep dives into how the scanner is built.

Inside the Go scanner orchestrator that runs every NANOTESTING scan
Single Go binary, durable Postgres queue, sub-check fan-out, step-level progress, and tool-isolated sidecars. The architecture in one read.
May 6, 2026
Prioritising dependency CVEs with KEV and EPSS
A CVSS score tells you how bad a bug could be. KEV and EPSS tell you whether to care this week. How to triage a dependency report without drowning.
May 6, 2026
How NANOTESTING renders signed PDF reports without LaTeX or headless Chrome
react-pdf + built-in Helvetica + a SHA-256 fingerprint. No browser, no LaTeX toolchain, no flakiness. Every report reproducible byte-for-byte.
May 3, 2026
How we keep scans safe to run on production
A security scanner that takes down your site is worse than no scanner. The guardrails that make NANOTESTING safe to point at a live target.
Apr 22, 2026