#security-audit (30 Repositories)
Ranked open-source repositories tagged with #security-audit, scored by pull request acceptance likelihood and maintainer engagement velocity.
82.1%
50.2h
30 repositories tagged #security-audit
Ozark-Connect/NetworkOptimizer
Self-hosted optimization, monitoring (NMS), and security audit tool for UniFi Networks. Includes Wi-Fi Optimizer for wireless health scoring and channel optimization, advanced DNS/VLAN/firewall security checks, config optimization suggestions, centralized WAN and LAN speed test server w/ L2 tracing, CM, ONT, SFP, 5G modem stats +more.
risuorg/risu
Automation Troubleshooting Framework to validate and report configuration, software installed, etc with bash, python, and your language of choice.
utmstack/UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
prowler-cloud/prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
google/osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
factionsecurity/faction
Pen Test Report Generation and Assessment Collaboration
martin-olivier/airgorah
A WiFi security auditing software
mrdaemon/exosphere
A simple CLI and TUI driven application that offers patch reporting for remote unix systems, written in Python
dependency-check/dependency-check-gradle
The dependency-check gradle plugin is a Software Composition Analysis (SCA) tool that allows projects to monitor dependent libraries for known, published vulnerabilities.
dependency-check/DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
garagon/nanostack
A workflow harness that helps AI coding agents plan, review, test, and ship safer code.
psalm/psalm-plugin-laravel
Security-focused Laravel static analyser
nyudenkov/pysentry
🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner
doyensec/inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
retracedhq/retraced
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
NodeSecure/js-x-ray
JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
waybarrios/opencode-power-pack
54 rigorous skills for Codex, OpenCode, and Pi: code review, security audit, feature development, frontend design, MCP tools, Hugging Face ML/training, and more.
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
aquasecurity/cloudsploit
Cloud Security Posture Management (CSPM)
NUWCDIVNPT/stig-manager
An API and client for managing STIG assessments
wireghoul/graudit
grep rough audit - source code auditing tool
lirantal/npq
safely install npm packages by auditing them pre-install stage
ossillate-inc/packj
Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
thousandflowers/Raccoon
macOS companion toolkit for power users
yv1ing/Z3r0
AI-native red-team workbench for authorized penetration testing and vulnerability research, with specialist agents, sandboxed tooling, evidence records, and replayable timelines.
Syslifters/sysreptor
A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.
rushter/hexora
Static analysis of malicious Python code
CISOfy/lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
pika-monitor/pika
Lightweight probe monitoring — Go + VictoriaMetrics + PostgreSQL/SQLite | Real-time metrics, service checks, tamper protection & security audit