security-scanner — salud del software de código abierto

97Excepcionalíndice de salud

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Go★ 31.2K16 sept 2026

MIT16 sept 2026 · métricas 2.10.0

95Excepcionalíndice de salud

future-architect/vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Go★ 12.3K20 sept 2026

GPL-3.020 sept 2026 · métricas 2.10.0

Go · npm

94Excepcionalíndice de salud

Bearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Go★ 274620 sept 2026

Licencia propia20 sept 2026 · métricas 2.10.0

npm · PyPI

94Excepcionalíndice de salud

NVIDIA/SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

Python★ 17.8K19 sept 2026

Apache-2.019 sept 2026 · métricas 2.10.0

PyPI

94Excepcionalíndice de salud

PyCQA/bandit

Bandit is a tool designed to find common security issues in Python code.

Python★ 8243↓ 29.1M/mes28 ago 2026

Apache-2.028 ago 2026 · métricas 2.10.0

PyPI · npm

94Excepcionalíndice de salud

koda-ai-studio/agent-bom

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python · TypeScript★ 32↓ 2924/mes16 oct 2026

Apache-2.016 oct 2026 · métricas 2.10.0

PyPI · npm

94Excepcionalíndice de salud

msaad00/agent-bom

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Python · TypeScript★ 31↓ 5301/mes8 sept 2026

Apache-2.08 sept 2026 · métricas 2.10.0

94Excepcionalíndice de salud

praetorian-inc/julius

Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds

Go★ 23617 sept 2026

Apache-2.017 sept 2026 · métricas 2.10.0

npm

93Excepcionalíndice de salud

protofire/solhint

Solhint is an open-source project to provide a linting utility for Solidity code.

JavaScript★ 1126↓ 668.7K/mes15 sept 2026

MIT15 sept 2026 · métricas 2.10.0

PyPI

92Excelenteíndice de salud

Ostorlab/oxo

OXO is a security scanning orchestrator for the modern age.

Python★ 581↓ 19.9K/mes9 sept 2026

Apache-2.09 sept 2026 · métricas 2.10.0

npm · PyPI

91Excelenteíndice de salud

OWASP/openshield

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command

Python · JavaScript★ 5616 sept 2026

MIT16 sept 2026 · métricas 2.10.0

PyPI · npm

91Excelenteíndice de salud

sattyamjjain/agent-audit-kit

Static scanner for MCP-connected AI agent pipelines. 348 rules across 14 categories, 14 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.

Python★ 13↓ 4551/mes15 sept 2026

Apache-2.015 sept 2026 · métricas 2.10.0

RubyGems

91Excelenteíndice de salud

wpscanteam/wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

Ruby★ 974228 ago 2026

Licencia propia28 ago 2026 · métricas 2.10.0

PyPI

84Excelenteíndice de salud

cpeoples/ansible-security-scanner

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

Python★ 10↓ 1179/mes9 sept 2026

Apache-2.09 sept 2026 · métricas 2.10.0

84Excelenteíndice de salud

glsec/glsec

Static security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, SARIF output, OWASP CICD-SEC and CWE mappings.

Go★ 2010 sept 2026

Apache-2.010 sept 2026 · métricas 2.10.0

PyPI · npm · crates.io

84Excelenteíndice de salud

redact-secret/redact-secret

Detect and redact secrets before they reach logs, storage, or LLM context. Deterministic Rust core for JavaScript, Python, Rust, and WebAssembly.

Rust · Python · JavaScript★ 7↓ 16.7K/mes10 oct 2026

MIT10 oct 2026 · métricas 2.10.0

crates.io · npm

83Excelenteíndice de salud

SentryPeer/SentryPeer

Protect your SIP Servers from bad actors at https://sentrypeer.org

C · Rust★ 21119 sept 2026

Licencia propia19 sept 2026 · métricas 2.10.0

NuGet

83Excelenteíndice de salud

microsoft/ApplicationInspector

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

C#★ 439528 ago 2026

MIT28 ago 2026 · métricas 2.10.0

Packagist

80Excelenteíndice de salud

ShieldCI/laravel

Automated code analysis for Laravel applications with 73 open-source analyzers covering security, performance, reliability, code quality, and best practices. ShieldCI Pro adds 82 more (155 total). Laravel 9+.

PHP★ 2↓ 16.5K/mes20 oct 2026

MIT20 oct 2026 · métricas 2.10.0

PyPI · crates.io · npm

80Excelenteíndice de salud

nyudenkov/pysentry

🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner

Rust★ 252↓ 94.9K/mes19 oct 2026

MIT19 oct 2026 · métricas 2.10.0

80Excelenteíndice de salud

openclaw/clawscan

Composable security scanning harness for agent skills

Go · Python★ 1613 sept 2026

MIT13 sept 2026 · métricas 2.10.0

npm

78Buenoíndice de salud

crclabs-hq/GateTest

AI-powered quality gate for CI: 121 modules, self-healing fixes, one verified PR. CLI, GitHub Action, MCP server, WordPress.

JavaScript · TypeScript★ 0↓ 1691/mes16 sept 2026

MIT16 sept 2026 · métricas 2.10.0

PyPI

75Buenoíndice de salud

PythonWoods-Dev/zenzic

Deterministic Document Integrity Engine for Markdown/MDX graphs.

Python★ 35 sept 2026

Apache-2.05 sept 2026 · métricas 2.10.0

PyPI · npm

75Buenoíndice de salud

gautamvarmadatla/mcpsafetywarden

MCP servers expose tools with no information about what they actually do at runtime. mcpsafetywarden sits between your agent and any MCP server, profiling tool behavior, blocking destructive calls, and running active security audits before you trust them in a workflow.

Python★ 8↓ 558/mes15 sept 2026

Licencia propia15 sept 2026 · métricas 2.10.0

PyPI

73Buenoíndice de salud

sunglasses-dev/sunglasses

Open source input firewall for AI agents, beta. A local scanner checks text, code, PDFs, images, QR codes, audio and video with 1,583 patterns across 117 categories and reports findings and incomplete scans. A Claude Code hook blocks secret material in tool calls and the paths and hosts your policy lists before tools run.

Python★ 10↓ 1856/mes19 oct 2026

MIT19 oct 2026 · métricas 2.10.0

73Buenoíndice de salud