Import scanner output
Paste nmap, Nuclei, Trivy or Grype output, or an SBOM (CycloneDX, SPDX); your stack fills itself and CVE ids go to bulk lookup.
Output is parsed in your browser; only component name, version and package id go to the server. Host addresses and file paths are never sent or stored.