Open source security-tools projects

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

Gather and update all available and newest CVEs with their PoC.

Modlishka. Reverse Proxy.

Cameradar hacks its way into RTSP videosurveillance cameras

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

Patch-level verification for Bundler

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS b

ARTEX 한국어판 · AI 자율 침투 테스트 프레임워크(upstream: Autumn-27/ARTEX, AGPL-3.0)

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access

802.11 Attack Tool

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Bu

safely install npm packages by auditing them pre-install stage

🧵 CLI tool for directly patching container images!

grep rough audit - source code auditing tool

A modular vulnerability scanner with automatic report generation capabilities.

An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Scans Software Bill of Materials (SBOMs) for security vulnerabilities

🧹 Cleaning up images from Kubernetes nodes

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

Pen Test Report Generation and Assessment Collaboration

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

🛡⚔️AI-Powered Penetration Testing Framework with automated vulnerability scanning, multi-agent system, and compliance reporting🛡⚔️