#security-automation (30 Repositories)
Ranked open-source repositories tagged with #security-automation, scored by pull request acceptance likelihood and maintainer engagement velocity.
51.9%
38.8h
30 repositories tagged #security-automation
l3montree-dev/devguard
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
DefectDojo/django-DefectDojo
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
cynative/cynative
Open-source security agents for cloud, code and runtime. 45 built-in agents audit AWS, GCP, Azure, Kubernetes, GitHub and GitLab for privilege escalation, public exposure, supply chain and more, or build your own in one markdown file. Live, read-only access to your infrastructure.
SecObserve/SecObserve
SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It supports a variety of open source vulnerability scanners and integrates easily into CI/CD pipelines.
xonsh/xonsh
🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.
securego/gosec
Go security checker
factionsecurity/faction
Pen Test Report Generation and Assessment Collaboration
secureCodeBox/secureCodeBox
secureCodeBox (SCB) - continuous secure delivery out of the box
GH05TCREW/pentestagent
PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.
nyudenkov/pysentry
🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner
flosell/trailscraper
A command-line tool to get valuable information out of AWS CloudTrail
DataDog/threatest
Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
gitleaks/gitleaks-action
Protect your secrets using Gitleaks-Action
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Vulnogram/Vulnogram
Vulnogram is the tool for reserving, managing, and publishing CVEs. Get started at vulnogram.org or deploy Docker edition for full enterprise features.
reconmap/reconmap
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.
yv1ing/Z3r0
AI-native red-team workbench for authorized penetration testing and vulnerability research, with specialist agents, sandboxed tooling, evidence records, and replayable timelines.
konstruktoid/hardening
Hardening Ubuntu. Systemd edition.
sametsazak/mergen
Mergen is an open-source, native macOS application for auditing and checking the security of your MacOS.
andreapollastri/checkpoint
Laravel Security Tool
ossf/cve-bin-tool
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
bountyyfi/lonkero
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
google/turbinia
Automation and Scaling of Digital Forensics Tools
mitre/saf
The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
We5ter/Scanners-Box
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
tonybaloney/pycharm-security
Finds security holes in your Python projects from PyCharm and GitHub
Hey-Telo/admyral
🤖 Admyral enables continuous control monitoring for any custom control
S3N4T0R-0X0/BEAR-C2
BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups.
Charlie-belmer/nosqli
NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.
cleanunicorn/theo
Ethereum recon and exploitation tool.