Go
go-appsec/interactsh-lite
Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)
MITSep 10, 2026 · metrics 2.10.0
All tags
Catalogue tag
#appsec
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
45 records
Go
vyprai/vyql
Multi-language taint and graph security scanner. Follows tainted data through your code and shows why each finding is a finding.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
PyPI
ajinabraham/njsscan
njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
LGPL-3.0Sep 21, 2026 · metrics 2.10.0
PyPI
manthanghasadiya/mcpsec
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
MITSep 14, 2026 · metrics 2.10.0
Go
cc1a2b/JShunter
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
MITSep 6, 2026 · metrics 2.10.0
PyPI
raccioly/websec-validator
Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.
MITSep 14, 2026 · metrics 2.10.0
npm
cdxgen/cdxgen-plugins-bin
Binary plugins for @cyclonedx/cdxgen npm package
MITSep 19, 2026 · metrics 2.10.0
Go
prasadnadkarni/mobilegate
Android APK release gate for CI/CD. Blocks releases on high-confidence security failures, not 150-finding reports.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
TanKimGwan/linmas
Proof-carrying defensive security reviews for AI-assisted software, with deterministic policy, portable evidence, and human review required.
Custom licenseSep 14, 2026 · metrics 2.10.0
RubyGems
urbanadventurer/WhatWeb
Next generation web scanner
GPL-2.0Aug 28, 2026 · metrics 2.10.0
Go
Lercas/prowl
High-precision secret scanner for code, tickets, logs, and web app with ml validation
Custom licenseOct 5, 2026 · metrics 2.10.0
npm · crates.io · Go +4
eobi/nemesis_shield_sdks
No repository description published.
MITSep 20, 2026 · metrics 2.10.0
Hex
slab/safeurl-elixir
HTTP client with built-in SSRF protection, compatible with Tesla and HTTPoison
Custom licenseSep 9, 2026 · metrics 2.10.0
Go
sanks205/getobserver
Finds what's wrong — and shows you the fix. Code, deps, config & infra — one offline scan, one report.
MITSep 18, 2026 · metrics 2.10.0
PyPI
FuzzingLabs/secpipe
MCP server for AI-driven security pipelines
Custom licenseAug 4, 2026 · metrics 2.10.0