Trending repositories

1.NationalSecurityAgency / ghidra

Ghidra is a software reverse engineering (SRE) framework

• software-analysis
• disassembler
• reverse-engineering

2.usestrix / strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

• agents
• artificial-intelligence
• cybersecurity
• penetration-testing
• ai-penetration-testing
• ai-pentesting
• +14 more

3.NVIDIA / SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

• agent-security
• agent-skills
• agentic-ai
• ai-security
• claude-code
• mcp
• +5 more

4.iBotPeaches / Apktool

A tool for reverse engineering Android apk files

• apktool
• apk
• android
• reverse-engineering
• arsc
• 9patch

5.skylot / jadx

Dex to Java decompiler

• android
• dex
• java
• decompiler

6.aquasecurity / trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

• security
• security-tools
• docker
• containers
• vulnerability-scanners
• vulnerability-detection
• +9 more

7.keycloak / keycloak

Open Source Identity and Access Management For Modern Applications and Services

• keycloak
• oidc
• saml

8.microg / GmsCore

Free implementation of Play Services

• java
• android
• microg
• google-cloud-messaging
• maps
• auth
• +8 more

9.pranshuparmar / witr

Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.

• cli
• devops
• freebsd
• golang
• linux
• macos
• +14 more

10.authelia / authelia

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

• totp
• ldap
• sso-authentication
• two-factor-authentication
• docker
• kubernetes
• +14 more

11.MaxHu-xuan / chat-archive-guard

Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.

• chat-archive
• python
• secret-scanning
• sqlite
• chat-export
• jsonl
• +8 more

12.openssl / openssl

General purpose TLS and crypto library

• cryptography
• openssl
• encryption
• tls
• ssl
• decryption

13.gchq / CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

• data-analysis
• data-manipulation
• encryption
• encoding
• compression
• parsing
• +1 more

14.casdoor / casdoor

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

• oidc
• sso
• oauth
• iam
• saml
• webauthn
• +14 more

15.google / osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

• scanner
• security-audit
• security-tools
• vulnerability-scanner

16.zaproxy / zaproxy

The ZAP by Checkmarx Core project

• zap
• zap-development
• dast
• appsec
• zaproxy
• security
• +3 more

17.prowler-cloud / prowler

This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.

• security
• security-tools
• security-audit
• security-hardening
• hardening
• aws
• +14 more

18.anchore / grype

A vulnerability scanner for container images and filesystems

• containers
• security
• vulnerability
• docker
• golang
• go
• +9 more

19.goharbor / harbor

An open source trusted cloud native registry project that stores, signs, and scans content.

• cncf
• container
• registry
• helm
• cloud-native
• containers
• +6 more

20.apache / caldera

Automated Adversary Emulation Platform

• adversary-emulation
• caldera
• security-automation
• red-team
• mitre-attack
• security-testing
• +1 more

21.openfga / openfga

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

• authorization
• permissions
• security
• zanzibar
• openfga
• entitlements
• +11 more

22.open-policy-agent / opa

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

• opa
• policy
• declarative
• json
• compliance
• cloud-native
• +2 more

23.falcosecurity / falco

Cloud Native Runtime Security

• cncf
• containers
• security
• falco
• ebpf
• kubernetes
• +4 more

24.OJ / gobuster

Directory/File, DNS and VHost busting tool written in Go

• go
• pentesting
• tool
• dns
• web

25.cilium / tetragon

eBPF-based Security Observability and Runtime Enforcement

• bpf
• ebpf
• kernel
• kubernetes
• security

26.mandiant / capa

The FLARE team's open-source tool to identify capabilities in executable files.

• malware-analysis
• reverse-engineering
• binary-analysis
• threat-intelligence
• gsoc-2026

27.androguard / androguard

Reverse engineering and pentesting for Android applications

• android
• dalvik
• reverse-engineering
• dex
• odex
• pentesting

28.stakater / Reloader

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!

• kubernetes
• openshift
• configmap
• secrets
• pods
• deployments
• +5 more

29.dexidp / dex

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

• oidc
• kubernetes
• idp
• identity-provider
• hacktoberfest

30.kubescape / kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

• kubernetes
• security
• nsa
• mitre-attack
• devops
• best-practice
• +1 more

31.bridgecrewio / checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

• terraform
• static-analysis
• aws
• gcp
• azure
• aws-security
• +7 more

32.authzed / spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

• zanzibar
• permissions
• database
• distributed-systems
• security
• security-tools
• +12 more

33.ory / hydra

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

• hydra
• oauth2
• openid-connect
• docker
• server
• security
• +14 more

34.cure53 / DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

• xss
• sanitizer
• dom
• security
• javascript
• dompurify
• +5 more

35.Vineflower / vineflower

Modern Java decompiler aiming to be as accurate as possible, with an emphasis on output quality. Fork of the Fernflower decompiler.

• decompiler
• fernflower
• java
• hacktoberfest

36.in-toto / witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

• security-tools
• security
• attestation
• verification
• supply-chain

37.apache / casbin

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

• casbin
• access-control
• authorization
• rbac
• abac
• acl
• +12 more

38.dromara / Sa-Token

Translated✨ An open-source, free, one-stop Java permission authentication framework that makes authentication and authorization simple and elegant! — Login authentication, permission authentication, distributed Session, microservice gateway authentication, SSO single sign-on, OAuth2.0 unified authentication, jwt integration, API Key authorization, API parameter signing

• java
• token
• authorization
• sso
• aouth2
• springcloud

39.BLAKE3-team / BLAKE3

the official Rust and C implementations of the BLAKE3 cryptographic hash function

40.jhaals / yopass

Secure sharing of secrets, passwords and files

• password-share
• encryption-decryption
• file-upload
• onetimelink
• onetimesecret
• secret-sharing

41.ory / kratos

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

• identity
• identity-management
• user-management
• users
• user
• login
• +5 more

42.dwisiswant0 / apkleaks

Scanning APK file for URIs, endpoints & secrets.

• mobile-security
• android-security
• reverse-engineering
• bugbounty
• static-analysis
• apk
• +2 more

43.lief-project / LIEF

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

• reverse-engineering
• malware-analysis
• binary-analysis
• parser
• modification
• executable-formats
• +13 more

44.JonathanSalwan / Triton

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

• reverse-engineering
• symbolic-execution
• binary-analysis
• program-analysis
• taint-analysis
• binary-translation
• +5 more

45.cert-manager / cert-manager

Automatically provision and manage TLS certificates in Kubernetes

• kubernetes
• letsencrypt
• tls
• certificate
• crd
• hacktoberfest

46.google / nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

• security
• linux-namespaces
• linux
• process-isolation
• seccomp-bpf-policies
• chroot

47.mandiant / flare-floss

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

• malware
• deobfuscation
• strings
• flare
• malware-analysis
• gsoc-2026

48.str4d / rage

A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.

• cli
• encryption
• zero-configuration
• secure-by-default
• unix-philosophy
• curve25519
• +5 more

49.pic-standard / pic-standard

Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.

• action-proposals
• agentic-ai
• agents
• ai
• cli
• crewai
• +14 more

50.CTFd / CTFd

CTFs as you need them

• ctf
• security
• education
• flask
• ctfd

51.googleapis / google-api-nodejs-client

Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.

• google
• google-api
• nodejs
• client
• client-library

52.spiffe / spire

The SPIFFE Runtime Environment

53.bitnami / sealed-secrets

A Kubernetes controller and tool for one-way encrypted Secrets

• kubernetes
• kubernetes-secrets
• devops-workflow
• encrypt-secrets
• gitops

54.pglombardo / PasswordPusher

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

• security
• password-expiration
• password
• password-safety
• communicate-passwords
• password-pusher
• +13 more

55.aquasecurity / tracee

Linux Runtime Security and Forensics using eBPF

• ebpf
• linux
• bpf
• security
• golang
• docker
• +2 more

56.jaksi / sshesame

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

• ssh
• honeypot
• go
• golang
• security

57.tclahr / uac

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

• incident-response
• forensics
• computer-forensics
• triage
• linux
• aix
• +14 more

58.openiddict / openiddict-core

Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET

• openidconnect
• oauth2
• aspnetcore
• dotnet

59.cloud-custodian / cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

• aws
• compliance
• cloud
• rules-engine
• cloud-computing
• management
• +8 more

60.elceef / dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

• phishing
• typosquatting
• domains
• dns
• osint
• idn
• +6 more

61.ozeranskii / httptap

Rich-powered CLI that breaks each HTTP request into DNS, connect, TLS, wait, and transfer phases with waterfall timelines, compact summaries, or metrics-only output.

• cli
• diagnostics
• http
• http2
• monitoring
• networking
• +5 more

62.Karib0u / rustinel

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

• blue-team
• detection-engineering
• edr
• endpoint-detection
• etw
• incident-response
• +14 more

63.awslabs / git-secrets

Prevents you from committing secrets and credentials into git repositories

64.win-acme / win-acme

Automate SSL/TLS certificates on Windows with ease

• acme
• certificates
• windows
• iis
• exchange
• rds
• +4 more

65.google / grr

GRR Rapid Response: remote live forensics for incident response

66.josstei / maestro-orchestrate

Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and compliance tools

• agentic
• ai-agents
• code-review
• developer-tools
• gemini
• gemini-cli
• +14 more

67.ambionics / phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

68.splunk / security_content

Splunk Security Content

• splunk
• detection
• engineering
• responses
• cicd
• cybersecurity
• +1 more

69.RyanDFIR / hindsight

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

• google-chrome
• hindsight
• chrome
• forensics
• dfir
• browser-forensics
• +2 more

70.pxb1988 / dex2jar

Tools to work with android .dex and java .class files

71.apereo / cas

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

• sso-authentication
• authentication
• authorization
• java
• websso
• saml2
• +14 more

72.RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

• vulnerabilities
• scanner
• firefox-extension
• grunt-plugins
• javascript
• vulnerable-libraries
• +8 more

73.google / timesketch

Collaborative forensic timeline analysis

• forensics
• dfir
• security
• timeline
• analysis

74.zitadel / oidc

Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation

• oidc
• oauth2
• openidconnect
• server
• client
• go
• +13 more

75.Hakky54 / certificate-ripper

🔐 A CLI tool to extract server certificates

• certificate
• ssl
• x509
• tls
• java
• macos
• +7 more

76.quay / clair

Vulnerability Static Analysis for Containers

• containers
• static-analysis
• go
• kubernetes
• docker
• oci
• +3 more

77.JetBrains / fernflower

Decompiler from Java bytecode to Java, used in IntelliJ IDEA.

• java
• decompiler
• reverse-engineering

78.kaplanelad / shellfirm

Safety guardrails for ai coding agents and human terminal commands

• rust
• devops
• zsh
• terminal
• shell
• devops-tools
• +5 more

79.aws / s2n-tls

An implementation of the TLS/SSL protocols

• tls
• ssl
• s2n
• encryption
• c
• c99
• +2 more

80.CorentinTh / enclosed

Minimalistic web app designed for sending private and secure notes.

• end-to-end-encryption
• minimalist
• note
• pastebin
• secure
• self-hosted
• +1 more

81.ashvardanian / StringZilla

Up to 100x faster strings for C, C++, CUDA, Python, Rust, Swift, JS, & Go, leveraging NEON, AVX2, AVX-512, SVE, GPGPU, & SWAR to accelerate search, hashing, sorting, edit distances, sketches, and memory ops 🦖

• simd
• dataset
• string
• string-manipulation
• string-matching
• substring
• +12 more

82.coreos / go-oidc

A Go OpenID Connect client.

• golang

83.mandiant / flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

• fakenet-ng
• traffic-redirection
• malware-analysis
• mandiant-flare
• gsoc-2026

84.log2timeline / plaso

Super timeline all the things

• forensics
• parsing
• timeline

85.step-security / harden-runner

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening
• security-hardening
• runners
• +3 more

86.caddyserver / certmagic

Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal

• https
• acme
• letsencrypt
• golang
• go
• automatic-https
• +2 more

87.cider-security-research / cicd-goat

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

• appsec
• cicd
• devops
• infosec
• devsecops
• security
• +3 more

88.safedep / vet

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code
• software-composition-analysis
• golang
• +5 more

89.sigstore / rekor

Software Supply Chain Transparency Log

• supply-chain
• provenance
• security
• transparency-log

90.jwtk / jjwt

Java JWT: JSON Web Token for Java and Android

• jwt
• java
• java-jwt
• jjwt
• jwt-token
• jwt-tokens
• +14 more

91.mcginty / snow

A Rust implementation of the Noise Protocol Framework

• cryptography
• crypto
• noise-protocol-framework
• noise-protocol
• noise
• rust
• +1 more

92.explodingcamera / liwan

liwan - Lightweight Analytics

• analytics
• privacy
• rust
• selfhosted
• tracking

93.ory / keto

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

• hacktoberfest
• abac
• access-control
• acl
• authorization
• fine-grained-permissions
• +8 more

94.s0md3v / ReconDog

Reconnaissance Swiss Army Knife

• recon
• information-gathering
• honeypot-detector
• subdomain-enumeration
• cms-detector

95.uNetworking / uSockets

Miniscule cross-platform eventing, networking & crypto for async applications

• miniscule
• cross-platform
• async
• tcp
• ssl

96.Luzifer / ots

One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser

• one-time-secret
• golang
• encryption
• aes256

97.membrane / api-gateway

API Gateway bridging modern and legacy APIs with WSDL-to-OpenAPI, SOAP-to-REST, XML, OAuth2, and GraphQL.

• oauth2
• api-gateway
• api
• rest
• openapi
• soap
• +3 more

98.deckrun / dockadvisor

Lightweight Dockerfile linter that helps you write better Dockerfiles. Get instant feedback with quality scores, security checks, and 60+ best practice rules.

99.OWASP / www-project-agent-memory-guard

Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.

• ai-agents
• langchain
• llm-security
• memory-poisoning
• owasp
• prompt-injection
• +14 more

100.greg7mdp / parallel-hashmap

A family of header-only, very fast and memory-friendly hashmap and btree containers.

• hash
• tables
• unordered-map
• unordered-set
• hash-container
• parallel
• +4 more