Search awesome repositories

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Find, verify, and analyze leaked credentials

Database governance built for humans and agents — controlling changes and access across every major database.

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.

Enterprise-ready zero-trust access platform built on WireGuard®.

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

Tfsec is now part of Trivy

Open Source Vulnerability Management Platform

Open Source Cloud Native Application Protection Platform (CNAPP)

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

🔥Open source RASP solution

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

A security scanner for your LLM agentic workflows

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

Deep research for your infra. Cynative runs frontier models across your code, cloud and runtime - reasoning through GitHub, GitLab, AWS, GCP, Azure and Kubernetes as one system - and comes back with verified answers.

preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.

The open source security engine for AI agent and supply-chain trust.

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

Efficiently show and monitor end-of-life dates for a number of products in your terminal and CI using endoflife.date API