Security Scanning

Open-source API security platform for discovery, posture, and CI/CD testing.

Developer-first security platform

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

Open-source AI hackers to find and fix your app’s vulnerabilities.

Privacy-focused CAPTCHA and bot defense platform.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Open source vulnerability DB and triage service.

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

Automatic SQL injection and database takeover tool

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Open Source Vulnerability Management Platform

measure dependency waste and attack surface before it ships

🕵️‍♂️ All-in-one OSINT tool for analysing any website

Open-source security tools for AI agents.

Open-source LLM-based vulnerability discovery product for defenders.

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Security scanner as fast as a linter with TUI triage.

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

Autonomous pentesting AI with MCP server and Python agents.

CloudRec is an open source multi-cloud security posture management (CSPM) platform designed to help organizations improve the security of their cloud environments.

🧵 CLI tool for directly patching container images!

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Find secrets with Gitleaks 🔑

A monitoring hub that watches popular open-source repositories and uses AI to detect when commits ar

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.

Chrome extension risk scanner — scan Chrome Web Store links or CRX/ZIP builds and generate evidence-based security/privacy reports. Open-core.

Open-source platform for testing AI agent security.

Agent-based Docker security audit platform with CIS benchmark compliance and remediation.

Detect and patch vulnerabilities in AI-generated Python code.

Open-source infrastructure management platform crafted for red team engagements.

Open source cloud native application protection platform.