PyPI
CycloneDX/cyclonedx-python-lib
Functionality and DataModels of OWASP CycloneDX for Python
Apache-2.09 sept 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#owasp
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
88 registros
npm · RubyGems
OWASP/threat-dragon
An open source threat modeling tool from OWASP
Apache-2.08 sept 2026 · métricas 2.10.0
npm · Go · crates.io
microsoft/agent-governance-toolkit
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
MIT28 ago 2026 · métricas 2.10.0
Go · npm
secureCodeBox/secureCodeBox
secureCodeBox (SCB) - continuous secure delivery out of the box
Licencia propia18 sept 2026 · métricas 2.10.0
PyPI
CycloneDX/cyclonedx-python
CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments
Apache-2.027 ago 2026 · métricas 2.10.0
npm · crates.io
AikidoSec/firewall-node
Zen protects your Node app against attacks with one line of code. Get peace of mind— at runtime.
Licencia propia12 sept 2026 · métricas 2.10.0
Go · npm
Bearer/bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Licencia propia20 sept 2026 · métricas 2.10.0
PyPI · npm
NuGuardAI/nuguard
AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessment, SBOM generation, and static analysis.
Licencia propia10 sept 2026 · métricas 2.10.0
PyPI
OWASP/DockSec
AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.
MIT10 sept 2026 · métricas 2.10.0
PyPI · npm
koda-ai-studio/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.016 oct 2026 · métricas 2.10.0
PyPI · npm
msaad00/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.08 sept 2026 · métricas 2.10.0
npm · PyPI
DefectDojo/django-DefectDojo
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
BSD-3-Clause30 sept 2026 · métricas 2.10.0
Maven
CycloneDX/cyclonedx-core-java
CycloneDX SBOM Model and Utils for Creating and Validating BOMs
Apache-2.019 oct 2026 · métricas 2.10.0
npm
CycloneDX/cyclonedx-node-npm
Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
Apache-2.015 sept 2026 · métricas 2.10.0
NuGet
CycloneDX/cyclonedx-dotnet
Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects
Apache-2.011 oct 2026 · métricas 2.10.0
npm · PyPI
CycloneDX/cyclonedx-javascript-library
Functionality and DataModels of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.
Apache-2.018 sept 2026 · métricas 2.10.0
npm
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
MIT9 sept 2026 · métricas 2.10.0
npm · PyPI
OWASP/openshield
Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command
MIT16 sept 2026 · métricas 2.10.0
npm · Maven · NuGet +1
cdxgen/cdxgen
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
Apache-2.014 sept 2026 · métricas 2.10.0
PyPI · npm
sattyamjjain/agent-audit-kit
Static scanner for MCP-connected AI agent pipelines. 348 rules across 14 categories, 14 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.
Apache-2.015 sept 2026 · métricas 2.10.0
Packagist · PyPI
CycloneDX/cyclonedx-php-library
Functionality and DataModels of OWASP CycloneDX for PHP
Apache-2.018 sept 2026 · métricas 2.10.0
PyPI · RubyGems
OWASP/www-project-agent-memory-guard
OWASP Foundation web repository
Apache-2.025 ago 2026 · métricas 2.10.0
Go
l3montree-dev/devguard
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
Licencia propia11 sept 2026 · métricas 2.10.0
npm
ofri-peretz/eslint
Security and code-quality ESLint plugins — 477 rules across 30 packages: 272 security rules mapped to CWE + OWASP, 107 quality, 98 React/a11y. ESLint 8.40/9/10 + Oxlint. The lint layer AI-generated code needs.
MIT13 sept 2026 · métricas 2.10.0
npm
CycloneDX/cyclonedx-webpack-plugin
Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.
Apache-2.015 sept 2026 · métricas 2.10.0
Go
CycloneDX/cyclonedx-gomod
Creates CycloneDX Software Bill of Materials (SBOM) from Go modules
Apache-2.018 oct 2026 · métricas 2.10.0
Packagist
CycloneDX/cyclonedx-php-composer
Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects
Apache-2.014 sept 2026 · métricas 2.10.0
npm
asamassekou10/ship-safe
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
MIT6 sept 2026 · métricas 2.10.0
npm · Go
daveshanley/vacuum
vacuum is the worlds fastest and most versatile OpenAPI, AsyncAPI & JSON Schema linter, docs generator and toolkit. It tears through API specs at light speed. 100% compatible with Spectral rulesets, and OpenAPI 3.0, 3.1 and 3.2
MIT11 sept 2026 · métricas 2.10.0
Go · npm
fabriziosalmi/caddy-waf
Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)
AGPL-3.019 sept 2026 · métricas 2.10.0