76,855 visible repositories in the index
1–24 of 126 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
⚡A CLI tool for code structural search, lint and rewriting. Written in Rust
PHP Static Analysis Tool - discover bugs in your code without running it!
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
Remove unused CSS. Also works with single-page apps.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Go security checker
🐳 A most popular sql audit platform for mysql
Nginx configuration static analyzer
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
[mirror] Go Tools
A JavaScript checker and optimizer.
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
TypeScript Compiler API wrapper for static analysis and programmatic code changes.
Awesome autocompletion, static analysis and refactoring library for python
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
An extensible multilanguage static code analyzer.