CoanaCoana is an open source vulnerability scanning tool that uses reachability analysis to eliminate over 80% of false positives. It helps developers focus only on exploitable vulnerabilities in direct and indirect dependencies.