Open source security-audit projects
Every project in the registry tagged security-audit, ranked by real GitHub adoption.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentles
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports mali
A WiFi security auditing software
Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
Pentest Report Generator
Patch-level verification for Bundler
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
An NFC research toolkit application for Android
Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.
Cybersecurity Evaluation Tool
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Bu
safely install npm packages by auditing them pre-install stage
grep rough audit - source code auditing tool
A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. B
Tool for building Kubernetes attack paths
Dradis Framework: Collaboration and reporting for IT Security teams
Lightweight probe monitoring — Go + VictoriaMetrics + PostgreSQL/SQLite | Real-time metrics, service checks, tamper protection & security audit
Pen Test Report Generation and Assessment Collaboration
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
Related tags
Frequently asked questions
How many open source security-audit projects are there?
This registry tracks 23 projects tagged security-audit, with 87,705 GitHub stars between them. The most-adopted is lynis at 16,611 stars.
Are these security-audit projects free to use?
Yes — 23 of the 23 carry an explicit open-source licence across 6 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which security-audit project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these security-audit projects still maintained?
19 of the 23 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.