
Git query language, for quickly searching git contents.

Wordfence
WPScan
Sucuri
Patchstack
MalCare Security Service
iThemes Security
NinjaFirewall (WP Edition)
WordPress vulnerability monitoring — scans your plugins and themes against real CVE data, no agent installed on your site.

Which is more popular?
Based on our record, Gitql seems to be more popular. It has been mentioned 1 time since March 2021.
Website, pricing, platforms and company facts side by side.
|
|
|
|
|---|---|---|
| Website | github.com | vulncue.com |
| Pricing | — | |
| Platforms | — | |
| Company | — | Startup from Spain · 1 - 9 employees · 2026 |
| Listed in |
In their own words, as submitted to SaaSHub.


No description of Gitql yet.
VulnCue scans a WordPress site's plugins and themes against public CVE/NVD data and flags what's actually exploitable, with a risk score and plain-language fixes. A free plan covers one site with a monthly scan; paid plans (from €5.95/mo) add more sites, faster scans and PDF reports. A companion...
An editorial look at what each product does well and who it suits.


Overall verdict
Why this product is good
Recommended for
No analysis of VulnCue yet.
How often each product is chosen within a category, 0–100% relative to the other.


As answered by people managing Gitql and VulnCue.
VulnCue's answer:
It matches your actual installed plugin/theme versions against public CVE data — it doesn't just say "a vulnerability exists in this plugin," it tells you whether your installed version is affected and whether a fix already exists. The free plan is genuinely usable (not a trial), and the companion WordPress plugin includes built-in two-factor authentication at no extra cost, so you don't need a separate security plugin just for that.
VulnCue's answer:
VulnCue grew out of running WordPress hosting day to day and seeing the same pattern over and over: sites getting compromised through an outdated plugin nobody realized was vulnerable. Most scanners either required deep security knowledge to interpret or didn't check the version you actually had installed — so VulnCue was built to answer one simple question in plain language: "is my site actually at risk right now, and what do I do about it?"
VulnCue's answer:
Yo lo dejaría en blanco o pondría algo así: "VulnCue is early-stage — our current users are independent WordPress site owners and small agencies rather than named enterprise accounts." ¿Prefieres dejarlo vacío directamente, o usar esa frase?
VulnCue's answer:
Unlike firewall-style plugins (Wordfence, NinjaFirewall), VulnCue never intercepts traffic on your live site — it only runs when you open its screen, so there's zero risk of it blocking real visitors. Compared to other scanners, findings come with plain-language explanations and a concrete fix, not just a CVE code and a severity number.
VulnCue's answer:
Two groups: independent WordPress site owners and freelancers who want to know if their site is genuinely at risk without needing security expertise, and agencies/developers managing several client sites who need one place to monitor all of them (the Agencia plan covers unlimited sites).
VulnCue's answer:
PHP 8.3 and SQLite for the core engine, a WordPress plugin in plain PHP (no external dependencies), public CVE/NVD and OpenCVE feeds as the vulnerability data source, and Stripe for billing.
Share your experience with using Gitql and VulnCue. For example, how are they different and which one is better?
Recommendations tracked on public social media and blogs since March 2021.


How does this compare to https://github.com/filhodanuvem/gitql. Source: over 3 years ago
Tracking VulnCue since Oct 2026.