PyPI · npm
prowler-cloud/prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
All tags
Catalogue tag
#security-audit
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
37 records
npm
NodeSecure/js-x-ray
JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
MITAug 4, 2026 · metrics 2.10.0
PyPI
pypa/pip-audit
Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go
theopenlane/core
Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more
Apache-2.0Jul 21, 2026 · metrics 2.10.0
Maven
dependency-check/DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm · RubyGems
dradis/dradis-ce
Dradis Framework: Collaboration and reporting for IT Security teams
GPL-2.0Sep 5, 2026 · metrics 2.10.0
npm
lirantal/npq
safely install npm packages by auditing them pre-install stage
Apache-2.0Jul 17, 2026 · metrics 2.10.0
Packagist
psalm/psalm-plugin-laravel
Security-focused Laravel static analyser
MITSep 5, 2026 · metrics 2.10.0
PyPI · npm
Smart-AI-Memory/attune-ai
Attune-AI is a spec-driven meta-orchestration framework designed to establish a deterministic alignment layer between autonomous LLM agents and a production codebase.
Apache-2.0Aug 2, 2026 · metrics 2.10.0
PyPI · crates.io · npm
nyudenkov/pysentry
🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner
MITAug 20, 2026 · metrics 2.10.0
crates.io
rust-secure-code/cargo-auditable
Make production Rust binaries auditable
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Go · Maven · npm
utmstack/UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
AGPL-3.0Jul 30, 2026 · metrics 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.0Aug 5, 2026 · metrics 2.10.0
PyPI · npm
owasp-dep-scan/dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
MITAug 24, 2026 · metrics 2.10.0
PyPI
infobyte/faraday
Open Source Vulnerability Management Platform
GPL-3.0Aug 29, 2026 · metrics 2.10.0
Go
cfgaudit/cfgaudit
AI agent configuration security auditor - find misconfigurations in Claude Code, Cursor, and other AI tools
Apache-2.0Aug 23, 2026 · metrics 2.10.0
RubyGems
rubysec/bundler-audit
Patch-level verification for Bundler
GPL-3.0Jul 17, 2026 · metrics 2.10.0
Go
vigolium/vigolium
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
Custom licenseJul 15, 2026 · metrics 2.10.0
Go
webishdev/fail2ban-dashboard
A web based dashboard for fail2ban
Apache-2.0Jul 22, 2026 · metrics 2.10.0
Go
djadmin/fort
Audit and fix your Mac's security in one command. No agent, no signup, open source.
MITSep 5, 2026 · metrics 2.10.0
PyPI
raccioly/websec-validator
Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.
MITJul 31, 2026 · metrics 2.10.0
Go · npm
cyberspacesec/har-skills
HAR Skills — AI-native library for HAR file analysis. Access via: Skills (CLAUDE.md), Go SDK, CLI, MCP. 23 commands, 70+ methods, progressive disclosure docs.
MITAug 3, 2026 · metrics 2.10.0
PyPI
c0r0n3r/cryptolyzer
CryptoLyzer is a fast, flexible and comprehensive server cryptographic protocol (TLS, SSL, SSH, DNSSEC) and related setting (HTTP headers, DNS records) analyzer and fingerprint (JA3, HASSH tag) generator with Python API and CLI. (read-only clone of the original GitLab project)
MPL-2.0Jul 27, 2026 · metrics 2.10.0
npm
sdsrss/sgc
All-in-one engineering workflow & knowledge engine for Claude Code. One-command install, runs standalone (Node >=18, no bun). L0-L3 task classification, 13 runtime invariants, code review, browser QA, security audit, and a deduplicated knowledge base that compounds across tasks.
MITJul 21, 2026 · metrics 2.10.0
Packagist
andreapollastri/checkpoint
Laravel Security Tool
MITAug 22, 2026 · metrics 2.10.0
Go
qyinm/gandalf
See what your agents changed. Review before apply. Roll back safely.
MITJul 17, 2026 · metrics 2.10.0
Go
elementsinteractive/sheriff
Sheriff is a tool to scan repositories and generate security reports.
MITJul 17, 2026 · metrics 2.10.0
Go
krisiasty/vcheck
Vulnerability detection and mitigation tool for Copy Fail and Dirty Frag bugs (CVE-2026-31431, CVE-2026-43284, CVE-2026-43500)
Apache-2.0Jul 18, 2026 · metrics 2.10.0
npm
sudoeren/arhus
local-first security analysis for TypeScript & JavaScript
MITJul 17, 2026 · metrics 2.10.0
Packagist
wikimedia/mediawiki-tools-phan-SecurityCheckPlugin
Mirror of https://gerrit.wikimedia.org/g/mediawiki/tools/phan/SecurityCheckPlugin See https://www.mediawiki.org/wiki/Developer_access for contributing
GPL-2.0Aug 7, 2026 · metrics 2.10.0