Go97Exceptionalhealth index
projectdiscovery/nucleiNuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Go★ 31.2KSep 16, 2026
Go95Exceptionalhealth index
future-architect/vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Go★ 12.3KSep 20, 2026
Go · npm94Exceptionalhealth index
Bearer/bearerCode security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Go★ 2,746Sep 20, 2026
npm · PyPI94Exceptionalhealth index
NVIDIA/SkillSpectorSecurity scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Python★ 17.8KSep 19, 2026
PyPI94Exceptionalhealth index
PyCQA/banditBandit is a tool designed to find common security issues in Python code.
Python★ 8,243↓ 29.1M/moAug 28, 2026
PyPI · npm94Exceptionalhealth index
koda-ai-studio/agent-bomOpen security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Python · TypeScript★ 32↓ 2,924/moOct 16, 2026
PyPI · npm94Exceptionalhealth index
msaad00/agent-bomOpen security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Python · TypeScript★ 31↓ 5,301/moSep 8, 2026
Go94Exceptionalhealth index
praetorian-inc/juliusSimple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds
Go★ 236Sep 17, 2026
npm93Exceptionalhealth index
protofire/solhintSolhint is an open-source project to provide a linting utility for Solidity code.
JavaScript★ 1,126↓ 668.7K/moSep 15, 2026
PyPI92Excellenthealth index
Ostorlab/oxoOXO is a security scanning orchestrator for the modern age.
Python★ 581↓ 19.9K/moSep 9, 2026
npm · PyPI91Excellenthealth index
OWASP/openshieldOpen source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command
Python · JavaScript★ 56Sep 16, 2026
PyPI · npm91Excellenthealth index
sattyamjjain/agent-audit-kitStatic scanner for MCP-connected AI agent pipelines. 348 rules across 14 categories, 14 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.
Python★ 13↓ 4,551/moSep 15, 2026
RubyGems91Excellenthealth index
wpscanteam/wpscanWPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
Ruby★ 9,742Aug 28, 2026
PyPI84Excellenthealth index
cpeoples/ansible-security-scanner🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Python★ 10↓ 1,179/moSep 9, 2026
Go84Excellenthealth index
glsec/glsecStatic security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, SARIF output, OWASP CICD-SEC and CWE mappings.
Go★ 20Sep 10, 2026
PyPI · npm · crates.io84Excellenthealth index
redact-secret/redact-secretDetect and redact secrets before they reach logs, storage, or LLM context. Deterministic Rust core for JavaScript, Python, Rust, and WebAssembly.
Rust · Python · JavaScript★ 7↓ 16.7K/moOct 10, 2026
crates.io · npm83Excellenthealth index
C · Rust★ 211Sep 19, 2026
NuGet83Excellenthealth index
microsoft/ApplicationInspectorA source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
C#★ 4,395Aug 28, 2026
Packagist80Excellenthealth index
ShieldCI/laravelAutomated code analysis for Laravel applications with 73 open-source analyzers covering security, performance, reliability, code quality, and best practices. ShieldCI Pro adds 82 more (155 total). Laravel 9+.
PHP★ 2↓ 16.5K/moOct 20, 2026
PyPI · crates.io · npm80Excellenthealth index
nyudenkov/pysentry🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner
Rust★ 252↓ 94.9K/moOct 19, 2026
Go80Excellenthealth index
Go · Python★ 16Sep 13, 2026
crclabs-hq/GateTestAI-powered quality gate for CI: 121 modules, self-healing fixes, one verified PR. CLI, GitHub Action, MCP server, WordPress.
JavaScript · TypeScript★ 0↓ 1,691/moSep 16, 2026
Python★ 3Sep 5, 2026
PyPI · npm75Goodhealth index
gautamvarmadatla/mcpsafetywardenMCP servers expose tools with no information about what they actually do at runtime. mcpsafetywarden sits between your agent and any MCP server, profiling tool behavior, blocking destructive calls, and running active security audits before you trust them in a workflow.
Python★ 8↓ 558/moSep 15, 2026
sunglasses-dev/sunglassesOpen source input firewall for AI agents, beta. A local scanner checks text, code, PDFs, images, QR codes, audio and video with 1,583 patterns across 117 categories and reports findings and incomplete scans. A Claude Code hook blocks secret material in tool calls and the paths and hosts your policy lists before tools run.
Python★ 10↓ 1,856/moOct 19, 2026
vigolium/vigoliumVigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
Go★ 1,063Sep 8, 2026
TypeScript★ 1↓ 2,985/moOct 16, 2026
Python★ 19Sep 19, 2026
Go · PyPI65Goodhealth index
RudrenduPaul/TenantGuardTenant-isolation security scanner for self-hosted multi-tenant AI-agent platforms. SARIF, JSON, and MCP output.
Go · Python · Open Policy Agent★ 0Sep 8, 2026
subodhkc/ai-appsecEvidence-backed AppSec for AI applications and agents. Powered by HAIEC.
TypeScript★ 4↓ 19.4K/moSep 20, 2026