Repository Index

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

• cve-scanner
• subdomain-takeover
• nuclei-engine
• vulnerability-detection

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

• agent-security
• agent-skills
• agentic-ai
• ai-security

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

• security
• compliance
• log-analysis
• vulnerability-detection

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

• shell
• linux
• pci-dss
• compliance

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

• scanner
• security-audit
• security-tools
• vulnerability-scanner

w3af: web application attack and audit framework, the open source web vulnerability scanner.

• scanner
• security
• appsec
• cross-site-scripting

Tool to look for several security related Android application vulnerabilities

SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

Patch-level verification for Bundler

• bundler-audit
• ruby-advisory-db
• ruby
• dependency-checker

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

• codereview
• cybersecurity
• ruby
• sinatra

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

• php
• php-codesniffer
• phpcs
• static-code-analysis

Security Auditor Utility for GraphQL APIs

• security
• penetration-testing
• auditing
• graphql

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity

Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks

• golang
• go
• supply-chain
• security

Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.

• audit
• auditor
• cli
• devsecops