Ranked by Attention Score: stars gained over the last 7 complete days
18 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Open-source agentic security operations platform:
Automated Adversary Emulation Platform
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Go security checker
The AI Agent for Cyber Security.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
Automated Security Testing For REST API's
Infection Monkey - An open-source adversary emulation platform
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker