open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
- api-security
- application-security
- kubernetes
- nginx
Repository Index
47,133 repositories indexed
25–48 of 50 · Most stars
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
- attack-surfaces
- pentesting
- security
- devsecops
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.
- cve-scanner
- mcp-server
- mcp-tools
- osv
Protect against malicious open source packages 🤖
The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
Learn cloud security by building it! An open-source homelab teaching Zero Trust, DevSecOps, IaC, and cloud architecture from the ground up.
Catch risky npm dependency changes before they merge.
- dependency-analysis
- devsecops
- github-actions
- malware
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
- security-tools
- security-automation
- aws-security
- cloud-security
🛡️ Free Open-Source AI-Powered Security Terminal & Vulnerability Scanner (CVE, SBOM). Multi-Protocol Access: SSH, SFTP, RDP, VNC, Serial. 12+ AI Agents (OpenAI, DeepSeek) for Pentesting, CTF, DevSecOps & Security Automation. Cross-Platform & Web UI.
Enhance the security of your web applications effortlessly with AWS Firewall Factory. Safeguard your valuable assets through seamless WAF deployment, updates, and staging, all centrally managed with AWS Firewall Manager.
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
- ai-safety
- ai-security
- claude-code
- llm-agent
🛡 Official AI Security Tool module for CVE-2026-75604 (Next.js Windows Unauthenticated Remote Code Execution) with safe in-app execution, deep vulnerability validation, and DevSecOps-ready security auditing workflows.
- ai-hacking
- ai-security-tool
- cve-scanning
- cve-tools
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
- ebpf
- ebpf-programs
- golang
- seccomp
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
Mock an SSH server and define all commands it supports (Python, Twisted)
Audit and fix your Mac's security in one command. No agent, no signup, open source.
- cli
- compliance
- endpoint-security
- golang
Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.
Safe access to production databases
- acl
- database
- database-access
- database-security
Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.
Give the agent a cage, not your keys. One-command Docker sandbox for AI coding agents: full autonomous permissions, per-project isolation, your host stays untouched.
Static analysis from configs → Kubernetes NetworkPolicies in seconds
Agile Threat Modeling as Code
- cdk
- modeling
- threagile
- threat