Ranked by Attention Score: stars gained over the last 7 complete days
62 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
Find secrets with Gitleaks 🔑
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
Weighs the soul of incoming HTTP requests to stop AI crawlers
Find, verify, and analyze leaked credentials
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Manage your dotfiles across multiple diverse machines, securely.
Simple and flexible tool for managing secrets
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
Open device management
A vulnerability scanner for container images and filesystems
eBPF-based Networking, Security, and Observability
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
The easiest, and most secure way to access and protect all of your infrastructure.
Database governance built for humans and agents — controlling changes and access across every major database.
Let's Encrypt/ACME client and library written in Go
Open-Source Phishing Toolkit
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
An open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid search, alerts, and plugins for formats, models and business rules.
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
Cameradar hacks its way into RTSP videosurveillance cameras
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
A secure low code deception runtime framework, leveraging AI for System Virtualization.
Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.
Linux Runtime Security and Forensics using eBPF
Go security checker
syzkaller is an unsupervised coverage-guided kernel fuzzer
Security sensor for realtime threat detection and protection
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Go implementation of JSON Web Tokens (JWT).
🔍 gowitness - a golang, web screenshot utility using Chrome Headless
Lightweight Certificate Transparency Log Monitor
Protect against malicious open source packages 🤖
XRay is a tool for recon, mapping and OSINT gathering from public networks.
Software Supply Chain Transparency Log
Database anonymization and test data management
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
Ziti SDK for Golang
Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
Reconnaissance tool for GitHub organizations
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
Software sandbox for storage of sensitive information in memory.
:tophat: simple, fun and transparent SSH (and telnet) bastion server
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
Secure Vault for Customer PII/PHI/PCI/KYC Records
Advanced Honeypot framework.
Galah: An LLM-powered web honeypot.
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.
Cardea is an SSH bastion server with access control, session recording, and optional TPM-backed key protection.
Keep your secrets out of your AI coding agents. A local HTTPS proxy that swaps real credentials with placeholders and injects them at the network boundary.