#security (30 Repositories)
Ranked open-source repositories tagged with #security, scored by pull request acceptance likelihood and maintainer engagement velocity.
84.4%
26.2h
30 repositories tagged #security
h5i-dev/h5i
An agent-native web security workspace. Find vulnerabilities through red-teaming. Formally verify properties of Rust codes in Lean 4.
firewalla/firewalla
http://firewalla.com
OWASP/wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
asamassekou10/ship-safe
The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.
DobermanCore/Doberman-Core
Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they execute.
Scille/parsec-cloud
Open source Dropbox-like file sharing with full client encryption !
mondoohq/mql
open source, cloud-native, graph-based query language
google/osv.dev
Open source vulnerability DB and triage service.
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
PrismorSec/prismor
Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)
RKNF404/chromium-hardening-guide
Harden chromium (somewhat) for privacy and security (and performance)
AikidoSec/firewall-node
Zen protects your Node app against attacks with one line of code. Get peace of mind— at runtime.
fleetdm/fleet
Open device management
itpropro/nuxt-oidc-auth
OIDC (OpenID connect) focused auth module for Nuxt
projectcalico/calico
Cloud native networking and network security
DependencyTrack/dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
mondoohq/cnspec
An open source, cloud-native security to protect everything from build to runtime
l3montree-dev/devguard
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
discord/access
Access, a centralized portal for employees to transparently discover, request, and manage their access for all internal systems needed to do their jobs
cipherstash/stack
Searchable, application-level encryption for building privacy-first apps
wazuh/wazuh-ansible
Wazuh - Ansible playbook
CrowdStrike/ansible_collection_falcon
Comprehensive toolkit for streamlining your interactions with the CrowdStrike Falcon platform.
DefectDojo/django-DefectDojo
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
kubescape/kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
microsoft/agent-governance-toolkit
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
wolfSSL/wolfssh
wolfSSH is a small, fast, portable SSH implementation, including support for SCP and SFTP.
openfga/cli
A cross-platform CLI to interact with an OpenFGA server
hahwul/dalfox
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
luckyPipewrench/pipelock
Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.
fu351/Doberman-Core
Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they execute.