PyPI · npm
prowler-cloud/prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
All tags
Catalogue tag
#security-tools
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
137 records
Go
trufflesecurity/trufflehog
Find, verify, and analyze leaked credentials
AGPL-3.0Aug 13, 2026 · metrics 2.10.0
Go
authzed/spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
NodeSecure/js-x-ray
JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
MITAug 4, 2026 · metrics 2.10.0
PyPI
blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
AGPL-3.0Aug 11, 2026 · metrics 2.10.0
PyPI
GitGuardian/ggshield
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
MITAug 13, 2026 · metrics 2.10.0
Go
aquasecurity/trivy-operator
Kubernetes-native security toolkit
Apache-2.0Jul 31, 2026 · metrics 2.10.0
npm
mdn/mdn-http-observatory
Backend for HTTP Observatory on MDN
MPL-2.0Jul 21, 2026 · metrics 2.10.0
Go
securego/gosec
Go security checker
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · crates.io
zizmorcore/zizmor
Static analysis for GitHub Actions
MITAug 28, 2026 · metrics 2.10.0
PyPI
PyCQA/bandit
Bandit is a tool designed to find common security issues in Python code.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
secdev/scapy
Scapy: the Python-based interactive packet manipulation program & library.
GPL-2.0Aug 3, 2026 · metrics 2.10.0
npm
arcjet/arcjet-js
Arcjet JavaScript (JS) / TypeScript SDK. Stop bots and automated attacks from burning your AI budget, leaking data, or misusing tools with Arcjet's AI security building blocks.
Apache-2.0Jul 19, 2026 · metrics 2.10.0
PyPI
Ostorlab/oxo
OXO is a security scanning orchestrator for the modern age.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Go
authzed/zed
Official command-line tool for managing SpiceDB
Apache-2.0Jul 30, 2026 · metrics 2.10.0
npm · RubyGems
pglombardo/PasswordPusher
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
Apache-2.0Jul 29, 2026 · metrics 2.10.0
npm
CyberStrikeus/CyberStrike
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.
AGPL-3.0Jul 23, 2026 · metrics 2.10.0
Go · RubyGems
gabrie30/ghorg
Quickly clone or backup massive amounts of org/users repositories into one directory - Supports GitHub, GitLab, Bitbucket, and more 🐇🥚
Apache-2.0Aug 13, 2026 · metrics 2.10.0
PyPI
ostorlab/ostorlab
OXO is a security scanning orchestrator for the modern age.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
Go
cynative/cynative
Open-source framework for security agents with live, read-only access to your infrastructure. Audit AWS, GCP, Azure, Kubernetes, GitHub and GitLab as one system for privilege escalation, public exposure, leaked credentials and more, with agents you write in one markdown file.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
lirantal/npq
safely install npm packages by auditing them pre-install stage
Apache-2.0Jul 17, 2026 · metrics 2.10.0
npm
jason5ng32/MyIP
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
MITAug 27, 2026 · metrics 2.10.0
npm
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
MITJul 16, 2026 · metrics 2.10.0
npm
asamassekou10/ship-safe
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
MITSep 6, 2026 · metrics 2.10.0
Go
betterleaks/betterleaks
Find leaked secrets everywhere.
MITAug 20, 2026 · metrics 2.10.0
Go
dmachard/DNS-collector
Grab your DNS logs, detect anomalies, and finally understand what's happening on your network. The missing piece between DNS servers and your data stack.
MITJul 24, 2026 · metrics 2.10.0
PyPI
jimmy058910/jmo-security-repo
JMo Security Suite - Terminal-first security audit toolkit with many tools, multi-target scanning, & compliance
Custom licenseJul 31, 2026 · metrics 2.10.0
crates.io
tkhq/qos
QuorumOS is a computation layer for running applications inside Trusted Execution Environments (TEEs)
AGPL-3.0Jul 17, 2026 · metrics 2.10.0
PyPI
DedSecInside/TorBot
Dark Web OSINT Tool
Custom licenseAug 28, 2026 · metrics 2.10.0
PyPI
aboutcode-org/vulnerablecode
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
Apache-2.0Jul 20, 2026 · metrics 2.10.0