Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
Reverse engineering and pentesting for Android applications
w3af: web application attack and audit framework, the open source web vulnerability scanner.
A high performance offensive security tool for reconnaissance and vulnerability scanning
Tool to look for several security related Android application vulnerabilities
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Tool to scan for secret files on HTTP servers
A modular vulnerability scanner with automatic report generation capabilities.
Protect against malicious open source packages 🤖
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
Security Auditor Utility for GraphQL APIs
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
Scans SPF and DMARC records for issues that could allow email spoofing.
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
A plugin based GraphQL vulnerability assessment tool.
A CVE scanner which can process a pkglist.