#security-tools (30 Repositories)
Ranked open-source repositories tagged with #security-tools, scored by pull request acceptance likelihood and maintainer engagement velocity.
82.9%
33.8h
30 repositories tagged #security-tools
asamassekou10/ship-safe
The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.
google/osv.dev
Open source vulnerability DB and triage service.
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
cynative/cynative
Open-source security agents for cloud, code and runtime. 45 built-in agents audit AWS, GCP, Azure, Kubernetes, GitHub and GitLab for privilege escalation, public exposure, supply chain and more, or build your own in one markdown file. Live, read-only access to your infrastructure.
fabriziosalmi/caddy-waf
Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)
google/syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer
utmstack/UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
0sec-labs/0
The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.
CERT-Polska/mailgoose
A web application that allows the users to check whether their SPF, DMARC and DKIM configuration is set up correctly.
kontext-security/kontext
Runtime Security for tool-using AI agents, with local policies, pre-action enforcement, and forensic audit trails.
SecObserve/SecObserve
SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It supports a variety of open source vulnerability scanners and integrates easily into CI/CD pipelines.
yaklang/yaklang
A programming language exclusively designed for cybersecurity
CERT-Polska/Artemis
A modular vulnerability scanner with automatic report generation capabilities.
prowler-cloud/prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
e-m-b-a/emba
EMBA - The firmware security analyzer
Security-Onion-Solutions/securityonion
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
Ostorlab/oxo
OXO is a security scanning orchestrator for the modern age.
praetorian-inc/vespasian
API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs
Keeper-Security/Commander
Keeper Commander is a python-based CLI and SDK interface to the Keeper Security platform. Provides administrative controls, reporting, import/export and vault management.
Netw0rkNoob/VulnClaw
基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。
securego/gosec
Go security checker
Asymptote-Labs/agent-beacon
The cross-harness, self-improving memory layer for AI agents.
zizmorcore/zizmor
Static analysis for GitHub Actions
seqra/opentaint
The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
sourcentis/mercator
Mapping the information system / Cartographie du système d'information
factionsecurity/faction
Pen Test Report Generation and Assessment Collaboration
htrgouvea/spellbook
Framework for rapid development of offensive security tools
x64dbg/x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
onecli/onecli
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
konstruktoid/ansible-role-hardening
Ansible role to apply a security baseline. Systemd edition.