Packagist69Goodhealth index
PHP★ 18↓ 2,074/moAug 13, 2026
TypeScript★ 0↓ 3,701/moJul 19, 2026
Python★ 2,954Aug 4, 2026
Go★ 11Aug 8, 2026
this-is-securl/securlSecURL - passive external security posture scanner. Free hosted scanner, open-source engine, CI integration
TypeScript · JavaScript★ 3Jul 16, 2026
DEgITx/rats-searchrats-search: BitTorrent P2P multi-platform search engine for Desktop and Web servers with integrated torrent client
C++ · JavaScript★ 1,901Jul 17, 2026
x-stp/rxdsMassively concurrent TLS certificate harvester with Feistel-permuted IPv4 scanning, template ClientHello, go from SSLv2 all the way to TLS1.3. JARM fingerprinting? Included.
Go★ 2Jul 15, 2026
npm63Moderatehealth index
TypeScript★ 89↓ 2,730/moAug 5, 2026
PyPI63Moderatehealth index
manthanghasadiya/mcpsecAn AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
Python★ 22↓ 319/moJul 28, 2026
npm63Moderatehealth index
Shell · TypeScript★ 111↓ 42.4M/moAug 27, 2026
Packagist62Moderatehealth index

hryagstn/laravel-scalpelA zero-dependency, filesystem-level forensic scanner that detects signs of compromise in your Laravel application — obfuscated backdoors, rogue PHP files, tampered .htaccess directives, missing .env files, and unexpected filesystem changes.
PHP★ 29↓ 3,787/moSep 6, 2026
npm60Moderatehealth index
calllint/calllintPre-flight risk linting for MCP and agent tools — check the blast radius before your agent runs them.
TypeScript · HTML★ 2↓ 3,504/moJul 31, 2026
Go★ 118Aug 1, 2026
Go · C · C++★ 2Jul 20, 2026
npm57Moderatehealth index
TypeScript★ 2↓ 1,122/moAug 29, 2026
Packagist56Moderatehealth index
PHP★ 12↓ 2,009/moJul 22, 2026
NuGet54Moderatehealth index
C#★ 120Jul 31, 2026
npm54Moderatehealth index
JavaScript★ 1,756↓ 56.4K/moJul 26, 2026
npm54Moderatehealth index
sudoeren/arhuslocal-first security analysis for TypeScript & JavaScript
TypeScript★ 6↓ 2,972/moJul 17, 2026
RubyGems54Moderatehealth index
Ruby★ 6,801Aug 28, 2026
cifertech/ESP32-DIVESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
C++ · C★ 3,650Aug 4, 2026
crates.io · npm53Moderatehealth index
Rust · MDX★ 2Jul 24, 2026
npm51Moderatehealth index

nsasoft/nsauditor-aiNSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltration. MIT licensed.
JavaScript★ 20↓ 3,215/moSep 6, 2026

roccomuso/netcat:computer: Netcat client and server modules written in pure Javascript for Node.js.
JavaScript★ 437↓ 12.6K/moAug 28, 2026
Mixed★ 9↓ 12.5K/moJul 31, 2026
JavaScript★ 14↓ 17.1K/moJul 30, 2026
C# · HTML · JavaScript★ 111Aug 5, 2026
Aegis-Runner/AegisRunnerAegisRunner crawls any website from a single URL, discovers every page, form, and interaction, then uses AI to generate a complete Playwright test suite. Also runs accessibility, SEO, security, and performance audits on every page — no recording, no scripting, no setup.
JavaScript★ 0↓ 8,920/moJul 25, 2026
TypeScript · JavaScript★ 0↓ 2,130/moAug 4, 2026
Maven33At Riskhealth index
nazmiefearmutcu/dive-into-cryptoBinance USDT-M futures scanner — 57 indicators × 12 timeframes + futures-microstructure/regime/MTF overlays, whale-divergence filter, one consensus verdict per symbol. Desktop (Python + React "Depth Terminal") & Android (Compose). Public data only, no keys.
Kotlin · Python · JavaScript★ 4Jul 25, 2026