npm
dotenvx/dotenvx
a secure dotenv–from the creator of `dotenv`
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
All tags
Catalogue tag
#security-tools
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
137 records
Go
goshs-labs/goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
MITAug 13, 2026 · metrics 2.10.0
Go
kontext-security/kontext
Secure agents in seconds with permissions enforced at runtime.
MITSep 4, 2026 · metrics 2.10.0
Go
praetorian-inc/brutus
Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.
Apache-2.0Aug 7, 2026 · metrics 2.10.0
PyPI
Keeper-Security/Commander
Keeper Commander is a python-based CLI and SDK interface to the Keeper Security platform. Provides administrative controls, reporting, import/export and vault management.
MITJul 17, 2026 · metrics 2.10.0
crates.io
biandratti/huginn-net
Multi-protocol passive fingerprinting library: TCP/HTTP (p0f-style) + TLS (JA4-style) analysis in Rust
Apache-2.0Jul 26, 2026 · metrics 2.10.0
—
duggytuxy/syswarden
SysWarden is a host-local security orchestrator combining authoritative nftables policy, HIDS/HIPS telemetry, bounded threat intelligence, out-of-band WAAP log analysis, authenticated high availability and a native terminal dashboard.
GPL-3.0Sep 5, 2026 · metrics 2.10.0
PyPI · crates.io · npm
nyudenkov/pysentry
🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner
MITAug 20, 2026 · metrics 2.10.0
crates.io
rust-secure-code/cargo-auditable
Make production Rust binaries auditable
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Go · Maven · npm
utmstack/UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
AGPL-3.0Jul 30, 2026 · metrics 2.10.0
npm
yowainwright/codependence
Stop wrestling with code dependencies. Use Codependence! 🤼♀️
MITAug 1, 2026 · metrics 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.0Aug 5, 2026 · metrics 2.10.0
Go · PyPI
adithyan-ak/AgentHound
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
Go
authzed/spicedb-operator
Kubernetes controller for managing instances of SpiceDB
Apache-2.0Jul 17, 2026 · metrics 2.10.0
npm
motdotla/dotenv
Loads environment variables from .env for nodejs projects.
BSD-2-ClauseAug 4, 2026 · metrics 2.10.0
npm · PyPI
openshield-org/openshield
Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command
MITAug 4, 2026 · metrics 2.10.0
PyPI · npm
owasp-dep-scan/dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
MITAug 24, 2026 · metrics 2.10.0
npm
michelonsouza/encrypt-storage
EncryptStorage provide a little more security in frontend
MITAug 28, 2026 · metrics 2.10.0
NuGet
microsoft/ApplicationInspector
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
MITAug 28, 2026 · metrics 2.10.0
Go · npm
xalgord/xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
MITJul 17, 2026 · metrics 2.10.0
RubyGems
0dayInc/pwn
PWN is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.
MITSep 5, 2026 · metrics 2.10.0
Go · PyPI
GreenmaskIO/greenmask
Database anonymization and test data management
Apache-2.0Aug 26, 2026 · metrics 2.10.0
crates.io
Karib0u/rustinel
Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.
Apache-2.0Aug 4, 2026 · metrics 2.10.0
PyPI
pglombardo/pwpush-cli
Password Pusher CLI
MITAug 5, 2026 · metrics 2.10.0
npm
lirantal/anti-trojan-source
Detect Glassworm & trojan source attacks that employ unicode bidi attacks to inject malicious code
Apache-2.0Jul 18, 2026 · metrics 2.10.0
PyPI
zizmorcore/zizmor-pre-commit
A pre-commit hook for zizmor.
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
Null-Square/Null-CLi
Open-source AI pentest and compliance-readiness CLI by NullSquare.
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI
cpeoples/ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
Go · npm
opt-nc/geol
Efficiently show and monitor end-of-life dates for a number of products in your terminal and CI using endoflife.date API
Apache-2.0Jul 19, 2026 · metrics 2.10.0
—
Asymptote-Labs/agent-beacon
Agent Beacon is the world's first open-source telemetry layer for AI agents wherever they run: locally, in CI, or in the cloud.
MITJul 15, 2026 · metrics 2.10.0