Go
aquasecurity/trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Apache-2.0Oct 6, 2026 · metrics 2.10.0
All tags
Catalogue tag
#vulnerability-scanners
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
27 records
Go
Checkmarx/kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
promptfoo/promptfoo
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
MITSep 16, 2026 · metrics 2.10.0
Go
future-architect/vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
GPL-3.0Sep 20, 2026 · metrics 2.10.0
Go · crates.io
greenbone/openvas-scanner
This repository contains the scanner component for Greenbone Community Edition.
GPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
greenbone/python-gvm
Greenbone Vulnerability Management Python Library
GPL-3.0Oct 18, 2026 · metrics 2.10.0
Go
aquasecurity/trivy-operator
Kubernetes-native security toolkit
Apache-2.0Sep 15, 2026 · metrics 2.10.0
—
greenbone/gvm-libs
Greenbone Vulnerability Management Libraries
GPL-2.0Sep 18, 2026 · metrics 2.10.0
PyPI · npm
freelabz/secator
secator - the pentester's swiss knife
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
lirantal/npq
safely install npm packages by auditing them pre-install stage
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
pyupio/safety
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
Custom licenseAug 27, 2026 · metrics 2.10.0
PyPI
infobyte/faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
GPL-3.0Oct 21, 2026 · metrics 2.10.0
PyPI
aboutcode-org/vulnerablecode
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
Apache-2.0Sep 11, 2026 · metrics 2.10.0
—
google/osv-scanner-action
No repository description published.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
greenbone/gvmd
Greenbone Vulnerability Manager - The database backend for the Greenbone Community Edition
AGPL-3.0Sep 10, 2026 · metrics 2.10.0
PyPI · npm
owasp-dep-scan/dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
MITSep 18, 2026 · metrics 2.10.0
PyPI · crates.io · npm
nyudenkov/pysentry
🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner
MITOct 19, 2026 · metrics 2.10.0
PyPI
GamehunterKaan/AutoPWN-Suite
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
Custom licenseSep 9, 2026 · metrics 2.10.0
Go
G-Rath/osv-detector
No repository description published.
MITOct 19, 2026 · metrics 2.10.0
Packagist
dgtlss/warden
A Laravel package that proactively monitors your dependencies for security vulnerabilities by running automated composer audits and sending notifications via webhooks and email
MITSep 5, 2026 · metrics 2.10.0
PyPI
manthanghasadiya/mcpsec
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
MITSep 14, 2026 · metrics 2.10.0
Go
csnp/cryptodeps
Cryptographic Dependency Scanner - Identify quantum-vulnerable cryptographic algorithms in your software dependencies. Part of the QRAMM Toolkit.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go · npm
Autumn-27/ScopeSentry
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
c0r0n3r/cryptolyzer
CryptoLyzer is a fast, flexible and comprehensive server cryptographic protocol (TLS, SSL, SSH, DNSSEC) and related setting (HTTP headers, DNS records) analyzer and fingerprint (JA3, HASSH tag) generator with Python API and CLI. (read-only clone of the original GitLab project)
MPL-2.0Sep 14, 2026 · metrics 2.10.0
Go
MrEx-Right/DORM
Modern, High-Performance Vulnerability Scanner. Features: Spider Crawler, Chaos Fuzzer, and RAM-based Exploit-DB integration.
AGPL-3.0Sep 5, 2026 · metrics 2.10.0
Go
tencat-dev/nessus-client-go
A Go Client library for interacting with the Nessus vulnerability scanner API
MITOct 19, 2026 · metrics 2.10.0
Go · Maven · PyPI
seqra/opentaint
The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
Apache-2.0Sep 10, 2026 · metrics 2.10.0