Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
Tenzir is the data pipeline engine for security teams.
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
Mad science p2p pipe across the web using webrtc that uses your Github private/public key for authentication and a signalhub for discovery
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
- ebpf
- ebpf-programs
- golang
- seccomp
Supply Chain Security Research - Living Off The Pipeline tools
- lotp
- supply-chain-security
- living-off-the-pipeline
Malware/IOC ingestion and processing engine
Handles OAuth and stores slack token
NaCL pipe
A modular Linux telemetry engine built with eBPF, libbpf CO-RE, and Modern C++ that captures kernel-level process, file, syscall, and network events through a portable event-processing pipeline for decoding, enrichment, filtering, and structured output—forming the foundation for higher-level runtime intelligence.