PyPI97Exceptionalhealth index
Python★ 516↓ 1.7M/moSep 18, 2026
Go · npm96Exceptionalhealth index
Go · JavaScript · Go Template★ 988Sep 18, 2026
Go95Exceptionalhealth index

future-architect/vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Go★ 12.3KSep 20, 2026
Go95Exceptionalhealth index
Go★ 8,934Aug 28, 2026
Go · npm94Exceptionalhealth index

Bearer/bearerCode security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Go★ 2,746Sep 20, 2026
PyPI94Exceptionalhealth index
Python · Open Policy Agent · HTML★ 365Sep 19, 2026
PyPI94Exceptionalhealth index

wazuh/wazuhWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
C++ · C · Python★ 16.9KSep 20, 2026
PyPI94Exceptionalhealth index

xonsh/xonsh🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.
Python★ 9,645↓ 357.2K/moSep 17, 2026
npm · PyPI93Exceptionalhealth index
Python · HTML★ 4,970Sep 30, 2026
npm92Excellenthealth index
TypeScript★ 2,711Sep 13, 2026
npm91Excellenthealth index

mitre/safThe MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
HTML★ 188↓ 5,191/moSep 27, 2026
PyPI91Excellenthealth index

usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Python · Go★ 63KSep 16, 2026
Go90Excellenthealth index

cynative/cynativeOpen-source framework for security agents with live, read-only access to your infrastructure. Audit AWS, GCP, Azure, Kubernetes, GitHub and GitLab as one system for privilege escalation, public exposure, leaked credentials and more, with agents you write in one markdown file.
Go · Shell★ 197Sep 5, 2026
Go90Excellenthealth index

l3montree-dev/devguardDevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
Go★ 159Sep 11, 2026
PyPI89Excellenthealth index

infobyte/faradayOpen-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
Python★ 6,809↓ 658/moOct 21, 2026
npm87Excellenthealth index

KeygraphHQ/shannonShannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
TypeScript★ 48.1K↓ 5,619/moSep 16, 2026
Go · Maven · npm87Excellenthealth index

utmstack/UTMStackEnterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
TypeScript · Java · PLpgSQL★ 582Sep 14, 2026
crates.io · PyPI86Excellenthealth index

Yamato-Security/hayabusaHayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Rust★ 3,392Oct 12, 2026
crates.io86Excellenthealth index
Rust★ 849↓ 3M/moSep 5, 2026
npm80Excellenthealth index

Shuffle/ShuffleShuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
JavaScript · Shell★ 2,459Oct 21, 2026
PyPI · crates.io · npm80Excellenthealth index

nyudenkov/pysentry🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner
Rust★ 252↓ 94.9K/moOct 19, 2026

agentgg-dev/agentggOpen source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own model.
TypeScript★ 300↓ 5,835/moSep 17, 2026

gocsaf/csafTools to download or provide CSAF (Common Security Advisory Framework) documents.
Go★ 72Sep 19, 2026

had-nu/wardexRisk-based release gate for CRA (Article 14), NIS2 and DORA compliance with SBOM, KEV correlation, and auditable evidence.
Go★ 2Sep 11, 2026

ASCIT31/Dark-MoonAutonomous AI pentesting engine across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes, IoT firmware and AI/LLM endpoints (OWASP LLM Top 10). Real exploits with proof for every finding. Privacy gateway: the LLM never sees your real IPs, hosts or creds; nothing leaves your perimeter.
Python · TypeScript · Shell★ 940Sep 16, 2026

mukul975/Anthropic-Cybersecurity-Skills817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Python★ 32.9KSep 16, 2026

IBM/simrunAttack Simulation Platform (ASP) for detection testing
Go · Svelte★ 8Sep 11, 2026

0xSteph/pentest-ai-agentsTurn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
Shell★ 2,235Sep 16, 2026
Packagist59Moderatehealth index
PHP★ 124↓ 29.4K/moOct 20, 2026
Go★ 2Sep 20, 2026