Go
Checkmarx/kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
All tags
Catalogue tag
#appsec
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
45 records
Go
DataDog/dd-trace-go
Datadog Go Library including APM tracing, profiling, and security monitoring.
Custom licenseOct 20, 2026 · metrics 2.10.0
Packagist · crates.io · NuGet
DataDog/dd-trace-php
Datadog PHP Clients
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
openziti/ziti
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go · npm
Bearer/bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI · npm
NuGuardAI/nuguard
AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessment, SBOM generation, and static analysis.
Custom licenseSep 10, 2026 · metrics 2.10.0
npm · PyPI
DefectDojo/django-DefectDojo
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
BSD-3-ClauseSep 30, 2026 · metrics 2.10.0
Go · Maven
praetorian-inc/titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
openziti/sdk-golang
Ziti SDK for Golang
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
MITSep 9, 2026 · metrics 2.10.0
npm · Maven · NuGet +1
cdxgen/cdxgen
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
lirantal/npq
safely install npm packages by auditing them pre-install stage
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
infobyte/faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
GPL-3.0Oct 21, 2026 · metrics 2.10.0
—
openziti/ziti-tunnel-sdk-c
No repository description published.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
projectdiscovery/interactsh
An OOB interaction gathering server and client library
MITSep 20, 2026 · metrics 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
Go
chaitin/SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
PyPI
squid-protocol/gitgalaxy
Convert source code into a repository-scale structural model. Air gapped, zero dependencies, SARIF and SBOM outputs.
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI · crates.io
maurosoria/dirsearch
Web path scanner
No licenseOct 19, 2026 · metrics 2.10.0
Go · npm
openctemio/openctem
Open-source Continuous Threat Exposure Management (CTEM) platform: asset discovery, attack surface management, risk-based prioritization, validation and remediation in one place. Go API + Next.js web UI.
GPL-3.0Oct 18, 2026 · metrics 2.10.0
npm · Go · PyPI
Armur-Ai/Pentest-Swarm-AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
AGPL-3.0Sep 28, 2026 · metrics 2.10.0
PyPI
OWASP/Agent-Security-Regression-Harness
Executable security regression testing for agentic applications and MCP-integrated systems.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
draugr-dev/draugr
Run Trivy, Semgrep, Gitleaks and more from one file. Consolidates SAST, SCA, secrets, IaC and container findings into one SARIF report and one pass/fail gate for CI — ranked by real risk, and can fail a PR on new findings only.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
go-appsec/toolbox
Collaborative application security testing between humans and agents via CLI and MCP
MITSep 19, 2026 · metrics 2.10.0
PyPI
marshallguillory86/secure-code-agent
Deterministic security gate + bounded AI remediation prompts. NIST SSDF / OWASP ASVS / CWE Top 25 anchored. The security sibling to maintainability-agent.
MITOct 5, 2026 · metrics 2.10.0
npm
sscodeai/agency-agents-ja
323個の即戦力AI専門エージェント — Claude Code/Cursor/Copilot等に対応。SIer/受託開発/SaaS/製造DX/公共分野など日本市場向け114個のオリジナルを含む、agency-agents日本語コミュニティ版
MITSep 15, 2026 · metrics 2.10.0
npm
Null-Square/Null-CLi
Open-source AI pentest and compliance-readiness CLI by NullSquare.
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
DataDog/dd-native-appsec-js
Node.js bindings for libddwaf
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm · Go
HodeTech/Leakwatch
High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.
MITSep 14, 2026 · metrics 2.10.0
npm
agentgg-dev/agentgg
Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own model.
Apache-2.0Sep 17, 2026 · metrics 2.10.0