Go
DataDog/dd-trace-go
Datadog Go Library including APM tracing, profiling, and security monitoring.
Licencia propia22 ago 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#appsec
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
29 registros
Packagist · crates.io · NuGet
DataDog/dd-trace-php
Datadog PHP Clients
Licencia propia22 ago 2026 · métricas 2.10.0
Go
openziti/ziti
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
Apache-2.028 ago 2026 · métricas 2.10.0
npm · Maven · NuGet +1
cdxgen/cdxgen
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
Apache-2.028 jul 2026 · métricas 2.10.0
Go
openziti/sdk-golang
Ziti SDK for Golang
Apache-2.029 jul 2026 · métricas 2.10.0
Go · Maven
praetorian-inc/titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
Apache-2.019 jul 2026 · métricas 2.10.0
npm
lirantal/npq
safely install npm packages by auditing them pre-install stage
Apache-2.017 jul 2026 · métricas 2.10.0
—
openziti/ziti-tunnel-sdk-c
El repositorio no publica descripción.
Apache-2.019 jul 2026 · métricas 2.10.0
PyPI · npm
NuGuardAI/nuguard
opensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis
Licencia propia18 jul 2026 · métricas 2.10.0
npm
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
MIT16 jul 2026 · métricas 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.05 ago 2026 · métricas 2.10.0
PyPI
squid-protocol/gitgalaxy
Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.
Licencia propia22 ago 2026 · métricas 2.10.0
PyPI
infobyte/faraday
Open Source Vulnerability Management Platform
GPL-3.029 ago 2026 · métricas 2.10.0
npm
Null-Square/Null-CLi
Open-source AI pentest and compliance-readiness CLI by NullSquare.
Licencia propia4 ago 2026 · métricas 2.10.0
PyPI · crates.io
maurosoria/dirsearch
Web path scanner
Sin licencia19 ago 2026 · métricas 2.10.0
Go
draugr-dev/draugr
Developer-first security scanning orchestration — describe your app in one file, run many scanners (SAST, SCA, secrets, IaC, containers, headers), get one SARIF verdict for CI & code scanning.
Apache-2.019 jul 2026 · métricas 2.10.0
Go
go-appsec/interactsh-lite
Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)
MIT5 sept 2026 · métricas 2.10.0
Go
go-appsec/toolbox
Collaborative application security testing between humans and agents via CLI and MCP
MIT17 jul 2026 · métricas 2.10.0
npm · Go
HodeTech/Leakwatch
High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.
MIT27 jul 2026 · métricas 2.10.0
Go
go-harden/interactsh-lite
Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)
MIT17 jul 2026 · métricas 2.10.0
Go
cc1a2b/JShunter
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
MIT6 sept 2026 · métricas 2.10.0
PyPI
raccioly/websec-validator
Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.
MIT31 jul 2026 · métricas 2.10.0
Go
prasadnadkarni/mobilegate
Android APK release gate for CI/CD. Blocks releases on high-confidence security failures, not 150-finding reports.
Apache-2.01 ago 2026 · métricas 2.10.0
npm
agentgg-dev/agentgg
agentgg cli
Apache-2.05 ago 2026 · métricas 2.10.0
PyPI
manthanghasadiya/mcpsec
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
MIT28 jul 2026 · métricas 2.10.0
npm
TanKimGwan/linmas
Proof-carrying defensive security reviews for AI-assisted software, with deterministic policy, portable evidence, and human review required.
Licencia propia29 jul 2026 · métricas 2.10.0
RubyGems
urbanadventurer/WhatWeb
Next generation web scanner
GPL-2.028 ago 2026 · métricas 2.10.0
Hex
slab/safeurl-elixir
HTTP client with built-in SSRF protection, compatible with Tesla and HTTPoison
Licencia propia17 jul 2026 · métricas 2.10.0
PyPI
FuzzingLabs/secpipe
MCP server for AI-driven security pipelines
Licencia propia4 ago 2026 · métricas 2.10.0