PyPI · npm
prowler-cloud/prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
All tags
Catalogue tag
#security-audit
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
53 records
npm
NodeSecure/js-x-ray
JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
MITSep 16, 2026 · metrics 2.10.0
Go
future-architect/vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
GPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI
pypa/pip-audit
Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go
theopenlane/core
Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go · npm
Bearer/bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Custom licenseSep 20, 2026 · metrics 2.10.0
Maven
dependency-check/DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
wazuh/wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Custom licenseSep 20, 2026 · metrics 2.10.0
npm · RubyGems
dradis/dradis-ce
Dradis Framework: Collaboration and reporting for IT Security teams
GPL-2.0Sep 5, 2026 · metrics 2.10.0
PyPI · npm
freelabz/secator
secator - the pentester's swiss knife
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
lirantal/npq
safely install npm packages by auditing them pre-install stage
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI · npm
Smart-AI-Memory/attune-ai
Persistent memory and receipt-verified workflows for Claude Code — plugin, MCP server, and spec-driven dev framework in one pip install.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
infobyte/faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
GPL-3.0Oct 21, 2026 · metrics 2.10.0
Packagist
psalm/psalm-plugin-laravel
Security-focused Laravel static analyser
MITSep 5, 2026 · metrics 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
Go
cfgaudit/cfgaudit
Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
crates.io
rust-secure-code/cargo-auditable
Make production Rust binaries auditable
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go · Maven · npm
utmstack/UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
AGPL-3.0Sep 14, 2026 · metrics 2.10.0
—
PentHertz/RF-Swift
🚀 A powerful multi-platform RF toolbox that deploys specialized radio, hardware, and other security tools in seconds on Linux, Windows, and macOS - supporting x86_64, ARM64 (Raspberry Pi, Apple Silicon), and RISC-V architectures without disrupting your primary OS. 📡✨
GPL-3.0Sep 26, 2026 · metrics 2.10.0
PyPI · npm
owasp-dep-scan/dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
MITSep 18, 2026 · metrics 2.10.0
npm
waybarrios/opencode-power-pack
54 rigorous skills for Codex, OpenCode, and Pi: code review, security audit, feature development, frontend design, MCP tools, Hugging Face ML/training, and more.
MITSep 18, 2026 · metrics 2.10.0
Go
0hardik1/kubesplaining
Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
NuGet
MichaelGrafnetter/DSInternals
Directory Services Internals (DSInternals) PowerShell Module and Framework
MITSep 15, 2026 · metrics 2.10.0
Packagist
ShieldCI/laravel
Automated code analysis for Laravel applications with 73 open-source analyzers covering security, performance, reliability, code quality, and best practices. ShieldCI Pro adds 82 more (155 total). Laravel 9+.
MITOct 20, 2026 · metrics 2.10.0
PyPI · crates.io · npm
nyudenkov/pysentry
🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner
MITOct 19, 2026 · metrics 2.10.0
Go
Ozark-Connect/NetworkOptimizer
Self-hosted optimization, monitoring (NMS), and security audit tool for UniFi Networks. Includes Wi-Fi Optimizer for wireless health scoring and channel optimization, advanced DNS/VLAN/firewall security checks, config optimization suggestions, centralized WAN and LAN speed test server w/ L2 tracing, CM, ONT, SFP, 5G modem stats +more.
Custom licenseOct 2, 2026 · metrics 2.10.0
RubyGems
rubysec/bundler-audit
Patch-level verification for Bundler
GPL-3.0Sep 9, 2026 · metrics 2.10.0
Packagist
ShieldCI/analyzers-core
ShieldCI Analyzers Core - Shared foundation for building static analysis tools. Includes abstract analyzer classes, result formatters, file parsers, and utilities. Used by both shieldci/laravel and shieldci/laravel-pro packages.
MITOct 21, 2026 · metrics 2.10.0
PyPI
onekey-sec/python-client
Official Python API client for ONEKEY
MITSep 18, 2026 · metrics 2.10.0
Go
vigolium/vigolium
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
Custom licenseSep 8, 2026 · metrics 2.10.0