npm62Moderatehealth index
subodhkc/mcp-tenant-isolationStatic analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.
TypeScript★ 4↓ 17.9K/moSep 20, 2026
varalys/redactylDeep artifact scanner for cloud-native environments. Find secrets hiding in container images, Helm charts, Kubernetes manifests, and nested archives.
Go★ 4Sep 19, 2026
PyPI59Moderatehealth index
gawk-dev/mcpgawkOne gateway in front of every MCP server your agents can reach. A server that changes after you approved it is caught, the call is blocked before it runs, and nothing leaves your machine.
Python · HTML★ 0↓ 3,703/moSep 26, 2026
PyPI · crates.io · npm59Moderatehealth index
mattybellx/GuardmarlyFind authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.
Python★ 14↓ 39/moSep 10, 2026
PyPI57Moderatehealth index
VanshBhardwaj1945/FlowSecCI/CD pipeline security analyzer — scans GitHub Actions workflows for attack vectors and maps findings to MITRE ATT&CK
Python★ 1Sep 18, 2026
npm57Moderatehealth index
Vinay-O/slopscoreScan your codebase for AI slop. Get a Slop Score. Ship clean. A zero-dependency CLI (85 detectors: security, performance, code-quality, design tells) + a 181-pattern Anti-Slop Protocol for AI coding agents.
JavaScript★ 2↓ 221/moSep 6, 2026
rubysolo/envisibleEncrypt secrets inline in your config and .env files with ENC[…] markers — local keypair or GCP/AWS/Azure KMS. Safe to commit. Ships a setup skill for AI coding agents.
Go★ 1Sep 10, 2026
PyPI56Moderatehealth index
Mehrdoost/devsecops-radar🛡️ Unify Trivy, Semgrep, Poutine & Zizmor scans into one AI-enhanced, offline-ready dashboard. Track CI/CD security trends, get LLM-powered analysis, and enforce policies — the open-source DevSecOps command center.
Python · JavaScript · HTML★ 1↓ 102/moSep 9, 2026
npm56Moderatehealth index
sudoeren/arhuslocal-first security analysis for TypeScript & JavaScript
TypeScript★ 9↓ 235/moSep 10, 2026
PyPI54Moderatehealth index
Akunimal/AI-Router-Blocker-AiOOpen-source DevSecOps gateway for AI traffic. Intercept, audit, and route LLM requests to prevent data leaks and enforce zero-trust security policies.
Python★ 1Jul 26, 2026
PyPI54Moderatehealth index
PramanKasliwal/MaunPrekshakThe Silent Observer — Fast, local-first security scanner for dependencies (SCA), exposed secrets & git history, SAST, Dockerfiles, and GitHub Actions with multi-provider AI remediation.
Python★ 0↓ 2,059/moOct 12, 2026
SVGreg/surfaceguardKnow what you're letting in — scans, signs and verifies what an agent loads. Agent Skills vs the OWASP Agentic Skills Top 10, with SARIF output and a load-time gate.
Go · Python★ 2Sep 14, 2026
sairintechnologycom/pkgsafeSupply-chain firewall for AI coding agents and developers — checks npm/PyPI packages against OSV advisories, typosquat & lifecycle-script heuristics, and your policy before install. Local-first, MCP-native.
Go★ 0Sep 8, 2026
PyPI · npm54Moderatehealth index
wang-jie-git/moatAI Coding Gatekeeper — Zero-config, real-time guardrails for AI-generated code. 零配置AI编码守门员，实时拦截架构/安全/回归问题。
Python · HTML★ 1↓ 2,206/moJul 19, 2026
Lercas/prowlHigh-precision secret scanner for code, tickets, logs, and web app with ml validation
Go★ 30Oct 5, 2026
npm51Moderatehealth index
nsasoft/nsauditor-aiNSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltration. MIT licensed.
JavaScript★ 20↓ 3,215/moSep 6, 2026
PyPI50Moderatehealth index
TariqDreamsTech/ranbval-sdkSecrets that refuse to be stolen. Sealed API keys that decrypt only on your allowlisted repo — and raise a security error if anything tries to print, iterate, or read them. Every access attempt alerts the owner.
Python★ 1↓ 2,156/moSep 12, 2026
RubyGems47Weakhealth index
OWASP/www-project-eks-goatOWASP EKS Goat is a deliberately vulnerable EKS cluster environment to explore AWS cloud-native security through hands-on attack and defense labs with walkthrough.
Shell · Python★ 48Sep 16, 2026
mwashburn160/pipeline-builderSelf-hosted platform for deploying and running software factories on AWS: secure delivery pipelines, a signed supply chain, policy-as-code compliance and multi-tenant governance — in minutes, not months.
TypeScript★ 2Oct 21, 2026
tamish560/mcprobeSecurity scanner and introspection tool for MCP servers. Connect, inspect, detect injection patterns, find tool shadowing, baseline for drift. Single binary, zero dependencies, Go stdlib only.
Go★ 2Sep 12, 2026
Go · PyPI45Weakhealth index
Zayan-Mohamed/secscanSecScan is a fast, configurable secret scanning tool written in Go that detects API keys, tokens, credentials, and high-entropy secrets across source code and full Git history. Built for developers and CI pipelines, with strong defaults and low false positives.
Go · Shell · PowerShell★ 4Sep 12, 2026
wille/gh-actions-cliHarden and manage your GitHub Actions: SHA-pin every action, enforce allowlist policies, update interactively, and analyze run health
Go★ 3Sep 10, 2026
zuhayrb/dexposePure-Go CLI that scans APK files for leaked secrets. Zero dependencies, gitleaks-compatible rules, CI-friendly exit codes.
Go★ 8Oct 21, 2026
malandas/andasSift real security risk from the noise — a cross-platform CLI that live-validates leaked secrets and reachability-ranks npm/Yarn vulnerabilities, so you fix what's actually exploitable.
Go★ 0Sep 17, 2026
sanks205/getobserverFinds what's wrong — and shows you the fix. Code, deps, config & infra — one offline scan, one report.
Go★ 15Sep 18, 2026
FYFran/ironwall8-step open-source security audit CLI. Secrets, SAST, dependency CVEs, IaC, supply chain. MIT. AI-assisted.
Java · HTML★ 0Sep 6, 2026
TypeScript★ 0↓ 2,921/moSep 10, 2026
Dockerfile★ 296Sep 16, 2026
Python★ 803Aug 4, 2026
dmdhrumilmistry/offatTests your API automatically for common API vulnerabilities. Project is still Work In Progress. PRs are appreciated.
Python★ 34Sep 17, 2026