Search awesome repositories

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Find, verify, and analyze leaked credentials

World's most advanced database DevSecOps solution for Developer, Security, DBA and Platform Engineering teams. The GitHub/GitLab for database DevSecOps.

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.

Enterprise-ready zero-trust access platform built on WireGuard®.

Tfsec is now part of Trivy

Open Source Vulnerability Management Platform

Open Source Cloud Native Application Protection Platform (CNAPP)

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

🔥Open source RASP solution

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

A security scanner for your LLM agentic workflows

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.

Deep cybersecurity research agent for your cloud, code and runtime - ask your infrastructure anything. Read-only, sandboxed.

The open source security engine for AI agent and supply-chain trust.

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.