47,133 repositories indexed
1–24 of 36 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
🕵️♂️ All-in-one OSINT tool for analysing any website
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
A powerful obfuscator for JavaScript and Node.js
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord
Help secure Express apps with various HTTP headers
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
Open Source Cloud Native Application Protection Platform (CNAPP)
Cross-platform desktop GUI app to clean image metadata
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow
The AI Agent for Cyber Security.
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Catch risky npm dependency changes before they merge.
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.
Graph-based security analysis for everyone
The universe in numbers. Free, open-source calculators for everything countable.