75,859 visible repositories in the index
1–24 of 31 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
A static analysis security vulnerability scanner for Ruby on Rails applications
Tfsec is now part of Trivy
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
Snyk CLI scans and monitors your projects for security vulnerabilities.
Find dead Python code
EMBA - The firmware security analyzer
Visa Vulnerability Agentic Harness
Zero shot vulnerability discovery using LLMs
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
Jar Analyzer - 一个 JAR 包 GUI 分析工具，内置 AI 助手协助分析，支持 JAR DIFF 分析，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JVM 栈帧分析，自定义表达式搜索等
grep rough audit - source code auditing tool
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).