A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Repository Index
67,262 visible repositories in the index
25–48 of 55 · Most stars
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
Protect against malicious open source packages 🤖
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
- active-directory
- cloud-security
- defensive-validation
- fastapi
ScopeWeaver: English and Korean localization of ARTEX, with preserved AGPL-3.0 attribution.
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
Security Auditor Utility for GraphQL APIs
- security
- penetration-testing
- auditing
- graphql
Catch risky npm dependency changes before they merge.
- dependency-analysis
- devsecops
- github-actions
- malware
Cyber Incident Response Team Playbook Battle Cards
- playbook-battle-cards
- cybersecurity
- cyber-threats
- cyber-security-team
Scriptable network authentication cracker
- rust
- cracking
- lua
- dictionary-attack
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
Free OSINT app for Discord IDs: paste a user, server or invite and see when it was made and who it copies.
Evidence-based DSM ransomware recovery: preservation, RAM key recovery, copy decryption, and GitLab validation.
Scope-based authorization for Ruby on Rails.
A Rails 6 boilerplate to create your next Saas product. Preloaded with graphQL, devise, JWT, CanCanCan, RailsAdmin, Rubocop, Rspec, i18n and more.
- ruby-on-rails
- api-only
- rubyonrails
- saas-boilerplate
Open Source SIEM (Security Information and Event Management system).
- siem
- risk-management
- risk-assessment
- vulnerability-management
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
- ai-safety
- ai-security
- claude-code
- llm-agent
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
御枢 · AegisOps — AI 安全运营工作台：告警研判、应急响应、漏洞整改，连接 Atlas、模型、工具与工作流。
- ai-agents
- secops
- security-operations
- vulnerability-management
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Easily Manage OAuth2 Scopes In Go