Ranked by Attention Score: stars gained over the last 7 complete days
1–100 of 196 by Attention Score · Oct 28, 2026 – Nov 3, 2026 (UTC)
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
Ghidra is a software reverse engineering (SRE) framework
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
🩵 A free, open-source app store for developers' releases on GitHub, Codeberg & Forgejo — browse, discover, and install apps with one click. Formerly GitHub Store.
A tool for reverse engineering Android apk files
Secure, Fast, and Extensible Sandbox runtime for AI agents.
Open source software that helps you create and deploy high-frequency crypto trading bots
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Open Source Identity and Access Management For Modern Applications and Services
the LLM vulnerability scanner
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
OSS-Fuzz - continuous fuzzing for open source software.
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
No description provided by the repository host.
Free implementation of Play Services
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
General purpose TLS and crypto library
A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included.
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
A modern and easy to use dashboard. 80+ integrations. 20K+ icons built in. Authentication out of the box. No YAML, drag and drop configuration.
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
The ZAP by Checkmarx Core project
A vulnerability scanner for container images and filesystems
An open source trusted cloud native registry project that stores, signs, and scans content.
A curated list of Awesome Threat Intelligence resources
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
IronClaw is an Agent OS focused on privacy, security and extensibility
eBPF-based Security Observability and Runtime Enforcement
A lightweight WebAssembly runtime that is fast, secure, and standards-compliant
Blazing-fast remote access
A lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An alternative to frp and ngrok.
The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.
Cross-platform multi-protocol VPN software. Pull requests are welcome. The stable version is available at https://github.com/SoftEtherVPN/SoftEtherVPN_Stable.
Automated Adversary Emulation Platform
Reverse engineering and pentesting for Android applications
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
A curated list of tools for incident response
No description provided by the repository host.
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Offline speech recognition API for Android, iOS, Raspberry Pi and servers with Python, Java, C# and Node
A collection of android security related resources
The FLARE team's open-source tool to identify capabilities in executable files.
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Cloud Native Runtime Security
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
Bandit is a tool designed to find common security issues in Python code.
Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
Automatically provision and manage TLS certificates in Kubernetes
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
ValueCell is a community-driven, multi-agent platform for financial applications.
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
Go security checker
Linux Runtime Security and Forensics using eBPF
A cross-platform, high-performance and asynchronous web server for static files-serving. ⚡
syzkaller is an unsupervised coverage-guided kernel fuzzer
Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET
An step by step fuzzing tutorial. A GitHub Security Lab initiative
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
Arkime is an open source, large scale, full packet capturing, indexing, and database system.
Hubble - Network, Service & Security Observability for Kubernetes using eBPF
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Up to 100x faster strings for C, C++, CUDA, Python, Rust, Swift, JS, & Go, leveraging NEON, AVX2, AVX-512, SVE, GPGPU, & SWAR to accelerate search, hashing, sorting, edit distances, sketches, and memory ops 🦖
Collaborative forensic timeline analysis
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
Splunk Security Content
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Library for OpenAPI 3 with spring-boot
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
Cloud native secrets management for developers - never leave your command line for secrets.
Super timeline all the things
Protect against malicious open source packages 🤖
Gravitee.io - OpenSource API Management
Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.