Security Scanning

Open-source API security platform for discovery, posture, and CI/CD testing.

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

Developer-first security platform

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Open-source AI hackers to find and fix your app’s vulnerabilities.

Open source vulnerability DB and triage service.

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Privacy-focused CAPTCHA and bot defense platform.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

measure dependency waste and attack surface before it ships

Security scanner as fast as a linter with TUI triage.

Open Source Vulnerability Management Platform

Open-source security tools for AI agents.

Automatic SQL injection and database takeover tool

🧵 CLI tool for directly patching container images!

Open-source LLM-based vulnerability discovery product for defenders.

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Autonomous pentesting AI with MCP server and Python agents.

An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.

🕵️‍♂️ All-in-one OSINT tool for analysing any website

A monitoring hub that watches popular open-source repositories and uses AI to detect when commits ar

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.

Chrome extension risk scanner — scan Chrome Web Store links or CRX/ZIP builds and generate evidence-based security/privacy reports. Open-core.

Find secrets with Gitleaks 🔑

Agent-based Docker security audit platform with CIS benchmark compliance and remediation.

Open-source platform for testing AI agent security.

Detect and patch vulnerabilities in AI-generated Python code.

Open-source infrastructure management platform crafted for red team engagements.

CloudRec is an open source multi-cloud security posture management (CSPM) platform designed to help organizations improve the security of their cloud environments.

Open source cloud native application protection platform.