vxcontrol / pentagi

Self-hosted multi-agent system that autonomously plans and runs penetration tests using tools like nmap, Metasploit and sqlmap in Docker.

aquasecurity / trivy

Open-source scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM data in containers, filesystems, git repos, VM images, and Kubernetes.

agent-substrate / substrate

Zero-trust runtime that sandboxes and snapshots large numbers of untrusted agent workloads on standard Kubernetes.

trufflesecurity / trufflehog

Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.