Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
Repository Index
67,262 visible repositories in the index
25–48 of 68 · Most stars
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
- aws-security
- study-guide
- study-plan
- appsec
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
Async await wrapper for easy error handling without try-catch
- async
- async-await
- es2017
- try-catch
ContainerSSH: Launch containers on demand
🔥Open source RASP solution
Find leaked secrets everywhere.
- cicd
- credentials
- developer-tools
- devops
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Repository containing evidence of police brutality during the 2020 George Floyd protests
- police
- cop
- cops
- police-reports
A FREE pragmatic DevOps learning to kickstart your DevOps career and knowledge in the Cloud Native era following the Agile MVP style in the AI era! ⭐ (2026 plans for DevOps, Cloud, Platform, SRE, SWE)
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
- threat-modeling
- practical-devsecops
- security-review
- devsecops-university
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
- api-security
- application-security
- kubernetes
- nginx
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
- attack-surfaces
- pentesting
- security
- devsecops
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
Learn cloud security by building it! An open-source homelab teaching Zero Trust, DevSecOps, IaC, and cloud architecture from the ground up.
Protect against malicious open source packages 🤖
The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
- security-tools
- security-automation
- aws-security
- cloud-security