#security-tools

Deep cybersecurity research agent for your cloud, code and runtime - ask your infrastructure anything. Read-only, sandboxed.

A Laravel package that proactively monitors your dependencies for security vulnerabilities by running automated composer audits and sending notifications via webhooks and email

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

Efficiently show and monitor end-of-life dates for a number of products in your terminal and CI using endoflife.date API

The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.

Agent Beacon is the world's first open-source telemetry layer for AI agents wherever they run: locally, in CI, or in the cloud.

🗿 Generate SHA-256 and SHA-512 checksums of a RubyGem

CLI to interact with Kondukto

Active Defense and HIDS/HIPS Orchestration for Critical Linux Infrastructure

Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)

Collaborative application security testing between humans and agents via CLI and MCP

Quickly track and analyze your ruby gem dependencies

One wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access

CLI to interact with Kondukto

Unified Risk & Threat Intelligence Management Platform

Patch-level verification for Bundler

Runtime Firewall for AI agents which catches the rogue tool call before it runs. Dangerous commands, secret leaks, prompt injection. For Claude Code, Codex and framework SDKs

The offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.

面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams

A modular tool to search for known vulnerabilities, exploits and more across various data sources

Audit and fix your Mac's security in one command. No agent, no signup, open source.

Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)

Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI infrastructure.

Unified DLP scanner for secrets and PII across filesystem, git, stdin, and SaaS sources.

A set of C# libraries for streamlined microservice development: audit, caching, outbox, CAP, MassTransit (events & config), idempotency, specifications, security, and other useful utilities. Packages: https://www.nuget.org/profiles/dex

🛡️ Unify Trivy, Semgrep, Poutine & Zizmor scans into one AI-enhanced, offline-ready dashboard. Track CI/CD security trends, get LLM-powered analysis, and enforce policies — the open-source DevSecOps command center.

Next generation web scanner

Vulnerability detection and mitigation tool for Copy Fail and Dirty Frag bugs (CVE-2026-31431, CVE-2026-43284, CVE-2026-43500)

Sheriff is a tool to scan repositories and generate security reports.

Laravel Security Tool