#security-tools

🐍 Cascavel — The zero-friction offensive security engine. Automate Red Team scans, validate exposures (CTEM), and generate compliance reports in one command.

Go library for SARIF - Static Analysis Results Interchange Format

Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.

Fast and smart content discovery tool with profiles, recursive scanning and technology-aware enumeration.

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

A set of C# libraries for streamlined microservice development: audit, caching, outbox, CAP, MassTransit (events & config), idempotency, specifications, security, and other useful utilities. Packages: https://www.nuget.org/profiles/dex

Detection tells you a key is real; geiger tells you whether it's dangerous.

Fuzz your Rust code with Google-developed Honggfuzz !

Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.