Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
- golang
- package-inventory
- supply-chain-security
A high performance offensive security tool for reconnaissance and vulnerability scanning
Advanced vulnerability scanning with Nmap NSE
Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.
- cpe
- cve
- cvss
- exploit-database
Open source vulnerability DB and triage service.
Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.
cve-search - a tool to perform local searches for known vulnerabilities
- cve-search
- common-vulnerabilities
- cpe
- cve-databases
NIST Certified SCAP 1.2 toolkit
Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
Read-only, local-first cloud security scanner for AWS, Azure and GCP. Your scan data stays on your machine.