Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
- aho-corasick
- cybersecurity
- devops
- git-hook
Repository Index
47,133 repositories indexed
145–162 of 162 · Most stars
A simple many-rules to many-files YARA scanner for incident response or malware zoos.
- yara
- yara-scanner
- incident-response
- dfir
The repository host gives no description.
A honeypot that can be used to observe traffic directed at home routers.
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.
- agentic-ai
- ai-safety
- fastapi
- langchain
CalmAV wrapper for elixir
- clamav
- elixir
- antivirus
- malware-detection
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
- ansible
- ansible-playbook
- devsecops
- infrastructure-as-code
Tor control port filter - whitelists which Tor control commands a client can use
- filter
- sandboxing
- security
- tor-control
A fork of a friendly car security exploration tool for the CAN bus
Crystal shard wrapping the rbsec/sslscan utility
Very simple but effective honeypot to detect port scanning on your network
A small, flexible authorization core for Go, built around subject–action–resource–scope checks.
HTTP honeypot on autopilot
- canarytokens
- deception
- deception-technology
- honeypot
Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.
- cdn
- cve
- polyfill
- polyfill-io
Is this app legit? Check before you connect. Free URL security scanner for indie developers and AI builders. Live at trustscanpro.com
- nextjs
- open-source
- phishing-detection
- scam-detection
A CVE scanner which can process a pkglist.
Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.
Detect CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Fast, accurate scanner with zero false positives.