Security tooling by Bangladeshi researchers: web-application scanners, OSINT exposure checkers and BDIX network utilities. Scope is strict — reconnaissance and defensive tools yes, anything that exists to abuse real people (SMS bombers, phishing kits, piracy lists) is rejected at research time. Tools here are useful to security professionals everywhere, not only in Bangladesh, and each one is verified live before listing.
Website-Vulnerability-ScannerOpen-source web scanner with 202 deterministic modules: XSS, SQLi, SSRF, subdomain takeover, OWASP Top 10 checks, WordPress auditing and MCP/AI-LLM security tests. Runs as a self-hosted platform you point at your own sites before an outsider does.MITBD-based
Exposure-Check-OSINTSelf-hosted OSINT exposure checker for email, username, phone and password leaks: 22 keyless sources, Have I Been Pwned k-anonymity lookups, and no API keys required — so you can audit your own footprint without handing credentials to a third party.MITBD-based
2mny-security-scanContinuous security-scan platform powering 2mny.com — scheduled scans, findings deduplication and per-site reporting, from the Dhaka security team behind much of this list's research tooling.see notesee list
BDIX servers checkerChecks and lists which servers are alive on BDIX, the national internet exchange — the starting point for anyone studying Bangladesh's domestic peering landscape.MITBD-based
bdix-testerTests which sites, FTP servers and download links are alive over BDIX connections. Hosted on GitLab, not GitHub — one of the few Bangladeshi tools that lives there.Licenced (see repo)BD-based
sundarbans-ransom-trackerResearch tracker of ransomware incidents affecting Bangladesh, with open data and a Zenodo DOI — crime and security transparency researchMIT (code) + CC-BY-4.0 (data)BD-based
ShurokkhaAI trust and financial-safety copilot for upay: LightGBM plus Gemini scam detection for mobile-money users, deployed with OpenAPI docs — "AI Trust & Financial-Safety Copilot for upay — Champion · AI DEV FEST 2026 · DIU CPC × upay AI Hackathon" — FastAPI + Next.js, CI, Docker, live demo with API docs..⚠ No licence fileBD-based
The most complete open-source scanner built in Bangladesh: 202 deterministic modules across injection flaws, takeover risks and even MCP/AI-LLM security — a class of checks most commercial scanners added only recently. Deterministic means the same input produces the same findings, which makes it usable in CI without flaky false positives.
Small, sharp and uniquely Bangladeshi: a utility that only makes sense where a national internet exchange shapes how traffic flows. A good example of the local-knowledge tooling this list exists to surface.
How this section is verified
Every link is fetched live at verification time — dead links are removed, not kept for history.
Bangladesh connections are evidenced (profile location, org page, or the product's own docs) — see the scope rules.
Dormant items (3+ years without activity) move to the legacy file with their last-activity date.
Licence information is quoted as the publisher states it; gaps are flagged with ⚠️ rather than guessed.