47,133 repositories indexed
1–24 of 26 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
A static analysis security vulnerability scanner for Ruby on Rails applications
Awesome autocompletion, static analysis and refactoring library for python
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
🚀Optimizer for mobile applications
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
TranslatedDesktop Android leak audit: permissions, endpoints, data flows, reversible fixes. Phone privacy audit: uses adb to scan an Android app's permissions, reporting endpoints, and data flows, and provides reversible remediation.
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.
SonarQube extension for Visual Studio providing code quality and security feedback directly in the IDE
Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.
Chronos - A static race detector for the go language
Owi: Seamless program analysis for C, C++, Go, Haskell, LLVM, Rust, Wasm and Zig.
Django application that performs SAST and Malware Analysis for Android APKs
Lua code analysis, with plugins for HTML and SciTE
A tool for quantitative risk analysis of Android applications based on machine learning techniques