Open source security-automation projects
Every project in the registry tagged security-automation, ranked by real GitHub adoption.
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.
Tool for building Kubernetes attack paths
PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
Scans Software Bill of Materials (SBOMs) for security vulnerabilities
Pen Test Report Generation and Assessment Collaboration
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
Related tags
Frequently asked questions
How many open source security-automation projects are there?
This registry tracks 9 projects tagged security-automation, with 25,480 GitHub stars between them. The most-adopted is vuls at 12,325 stars.
Are these security-automation projects free to use?
Yes — 9 of the 9 carry an explicit open-source licence across 6 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which security-automation project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these security-automation projects still maintained?
6 of the 9 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.