Repository Index

An open source trusted cloud native registry project that stores, signs, and scans content.

• cncf
• container
• registry
• helm

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

• security
• compliance
• log-analysis
• vulnerability-detection

The ZAP by Checkmarx Core project

• zap
• zap-development
• dast
• appsec

A vulnerability scanner for container images and filesystems

• containers
• security
• vulnerability
• docker

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

• kubernetes
• security
• nsa
• mitre-attack

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.

• sn1per
• sn1per-professional
• bugbounty-platform
• attack-surface

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

• terraform
• static-analysis
• aws
• gcp

Reverse engineering and pentesting for Android applications

• android
• dalvik
• reverse-engineering
• dex

Open Source Cloud Native Application Protection Platform (CNAPP)

• cloud-native
• vulnerability-management
• threat-analysis
• devsecops

w3af: web application attack and audit framework, the open source web vulnerability scanner.

• scanner
• security
• appsec
• cross-site-scripting

A high performance offensive security tool for reconnaissance and vulnerability scanning

• reconnaissance
• scanner
• vulnerability-assessment
• vulnerability-scanner

Patch-level verification for Bundler

• bundler-audit
• ruby-advisory-db
• ruby
• dependency-checker

NIST Certified SCAP 1.2 toolkit

• scap
• xccdf
• oval
• cpe

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

• tokenization
• web-security
• compliance
• security

The repository host gives no description.

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

Security Auditor Utility for GraphQL APIs

• security
• penetration-testing
• auditing
• graphql

Catch risky npm dependency changes before they merge.

• dependency-analysis
• devsecops
• github-actions
• malware

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks

• golang
• go
• supply-chain
• security

A plugin based GraphQL vulnerability assessment tool.

• graphql
• graphql-security
• pentest-tool
• python3