55,140 visible repositories in the index
1–14 of 14 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
🕵️♂️ All-in-one OSINT tool for analysing any website
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy
Open Source Cloud Native Application Protection Platform (CNAPP)
Open-source AI-powered offensive security harness for automated penetration testing.
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
The open-source AI security harness. Includes a web interface for code analysis, pentesting, vulnerability research, reverse engineering, verification, and fixing + CLI and MCP for agents.
Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.
TranslatedFull-Chain Sentinel (全链哨兵, "full-chain sentinel") is a cybersecurity Agent that integrates web penetration testing, Android app security testing, iOS app security testing, batch target probing for offensive and defensive operations, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
Local-first password manager with direct device-to-device sync
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.