🔥Open source RASP solution
Repository Index
47,133 repositories indexed
25–48 of 59 · Most stars
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
A helm plugin that help manage secrets with Git workflow and store them anywhere
- helm
- helm-plugin
- helm-plugins
- kubernetes
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
A collection of postmortem templates
- site-reliability-engineering
- site-reliability
- devops
- postmortem
Protect against malicious open source packages 🤖
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources
The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
Easy, painless AWS credentials on developer laptops.
Nginx common useful configuration
- nginx
- configs
- nginx-configuration
- codesandbox
Catch risky npm dependency changes before they merge.
- dependency-analysis
- devsecops
- github-actions
- malware
A colleciton of CTF write-ups all using pwntools
Cyber Incident Response Team Playbook Battle Cards
- playbook-battle-cards
- cybersecurity
- cyber-threats
- cyber-security-team
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
Discover internet-wide misconfigurations while drinking coffee
- cybersecurity
- scanner
- golang
- osint
Open Source SIEM (Security Information and Event Management system).
- siem
- risk-management
- risk-assessment
- vulnerability-management
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
- ai-safety
- ai-security
- claude-code
- llm-agent
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
Routopsy - Hacking Routers with Routers
Public repository for improvements to the EXTRABACON exploit
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
TranslatedCyclops is a browser with XSS detection capabilities
- security
- xss
- taint-tracking
- vulnerability