Repository Index

An open source trusted cloud native registry project that stores, signs, and scans content.

• cncf
• container
• registry
• helm

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

• security
• compliance
• log-analysis
• vulnerability-detection

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

• shell
• linux
• pci-dss
• compliance

The ZAP by Checkmarx Core project

• zap
• zap-development
• dast
• appsec

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go

Reverse engineering and pentesting for Android applications

• android
• dalvik
• reverse-engineering
• dex

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

• vulnerabilities
• scanner
• firefox-extension
• grunt-plugins

A high performance offensive security tool for reconnaissance and vulnerability scanning

• reconnaissance
• scanner
• vulnerability-assessment
• vulnerability-scanner

Tool to look for several security related Android application vulnerabilities

SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries

• security-vulnerabilities
• security
• vulnerabilities
• lighthouse

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

• tokenization
• web-security
• compliance
• security

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners

Security Auditor Utility for GraphQL APIs

• security
• penetration-testing
• auditing
• graphql

Catch risky npm dependency changes before they merge.

• dependency-analysis
• devsecops
• github-actions
• malware

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.

• angularjs
• xss
• xss-scanners
• exploit

Scans SPF and DMARC records for issues that could allow email spoofing.

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

A blade runner for your network. Detects shadow AI agents before they go rogue.

Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.

Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks

• golang
• go
• supply-chain
• security