#security-tools

Find, verify, and analyze leaked credentials

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

The recursive internet scanner for hackers. 🧡

secureCodeBox (SCB) - continuous secure delivery out of the box

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

📦 Produce secure packages and containers with declarative configurations

Scapy: the Python-based interactive packet manipulation program & library.

Go security checker

Static analysis for GitHub Actions

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

Bandit is a tool designed to find common security issues in Python code.

Cameradar hacks its way into RTSP videosurveillance cameras

Kubernetes-native security toolkit

Find and redact sensitive data before it leaks — a fast, offline CLI and Go library that detects PII, secrets, and credentials in files and streams, scores them with context-aware confidence, and redacts them format-preserving. Nothing leaves your host.

Backend for HTTP Observatory on MDN

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

sbomify is a product security artifact hub and a trust center.

QuorumOS is a computation layer for running applications inside Trusted Execution Environments (TEEs)