85,578 visible repositories in the index
1–23 of 23 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
Open Cyber Threat Intelligence Platform
A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.
Berty is a secure peer-to-peer messaging app that works with or without internet access, cellular data or trust in the network
Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy
Open-source AI-powered offensive security harness for automated penetration testing.
Web app that provides basic navigation and annotation of ATT&CK matrices
Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
Unlocking the Full Potential of OPC UA with Typescript and NodeJS - http://node-opcua.github.io/
Pentest Copilot is an AI-powered browser based ethical hacking assistant tool designed to streamline pentesting workflows.
LuaN1aoAgent is a fully autonomous AI-driven penetration testing agent powered by graph-based cognitive reasoning.
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
The open-source cybersecurity harness. Automate red team & blue team workflows with custom agents - code analysis, pentesting, LLM redteaming, reverse engineering, vulnerability verification, and fixing. Web Interface, CLI and MCP for agents.
TranslatedFull-Chain Sentinel (全链哨兵, "full-chain sentinel") is a cybersecurity Agent that integrates web penetration testing, Android app security testing, iOS app security testing, batch target probing for offensive and defensive operations, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
The AI Agent for Cyber Security.
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
Every hack, exploit and breach, live: new vulnerabilities, active exploits and breaches on one globe, with sources and one-click fixes.
A flexible playground for Android CTF challenges.
Security training for the apps you actually ship. Open your browser and start hacking.
Privacy-first Chrome extension for real-time website security analysis using on-device AI. Trust scores (0-100), phishing detection, SSL verification, cookie compliance & AI chatbot powered by WebLLM with zero external data transmission.