Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
Why do you think that https://github.com/apache/logging-log4j2 is a good alternative to tsunami-security-scanner