vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
vxcontrol / pentagi
gitleaks / gitleaks
Find secrets with Gitleaks ๐
Armur-Ai / Pentest-Swarm-AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning โ supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
Autumn-27 / ScopeSentry
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
google / agentmesh
Agent Mesh
caddyserver / caddy
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
The-Vibe-Company / quivr
An open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid search, alerts, and plugins for formats, models and business rules.
aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
projectdiscovery / nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
authelia / authelia
The Single Sign-On Multi-Factor portal for web apps. OpenID Certifiedโข and Post-Quantum Cryptography Ready.
trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
cilium / cilium
eBPF-based Networking, Security, and Observability
TecharoHQ / anubis
Weighs the soul of incoming HTTP requests to stop AI crawlers
getsops / sops
Simple and flexible tool for managing secrets
chaitin / SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
twpayne / chezmoi
Manage your dotfiles across multiple diverse machines, securely.
gravitational / teleport
The easiest, and most secure way to access and protect all of your infrastructure.
slackhq / nebula
A scalable overlay networking tool with a focus on performance, simplicity and security
crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
txthinking / brook
A cross-platform programmable network tool
canopy-network / canopy
The official go implementation of the Canopy Network protocol
shadow1ng / fscan
ไธๆฌพๅ ็ฝ็ปผๅๆซๆๅทฅๅ ท๏ผๆนไพฟไธ้ฎ่ชๅจๅใๅ จๆนไฝๆผๆซๆซๆใ(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
bytebase / bytebase
Database governance built for humans and agents โ controlling changes and access across every major database.
OpenNHP / opennhp
A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the AI-driven world.
anchore / grype
A vulnerability scanner for container images and filesystems
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
BishopFox / sliver
Adversary Emulation Framework
kubeshark / kubeshark
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
gravitl / netmaker
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
majd / ipatool
Command-line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages.
linkerd / linkerd2
Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.
google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
projectdiscovery / httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
go-acme / lego
Let's Encrypt/ACME client and library written in Go
golang-jwt / jwt
Go implementation of JSON Web Tokens (JWT).
securego / gosec
Go security checker
smallstep / certificates
๐ก๏ธ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
ViRb3 / wgcf
๐ค Cross-platform, unofficial CLI for Cloudflare Warp
openbao / openbao
OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
CarterPerez-dev / Cybersecurity-Projects
Building 70 Projects ranging from beginner to advanced so anyone can โ learn from, build upon, use as a reference, or even copy directly. Gamified Cybersecurity learning ๐
kyverno / kyverno
Unified Policy as Code
aquasecurity / kube-bench
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
turbot / steampipe
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
AIPentest / CyberStrikeAI
The system of action for AI-native cybersecurityโwhere intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
projectcalico / calico
Cloud native networking and network security
gopasspw / gopass
The slightly more awesome standard unix password manager for teams
authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
fleetdm / fleet
Open device management
j3ssie / osmedeus
A Modern Orchestration Engine for Security
cloudquery / cloudquery
Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.
google / syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer
azukaar / Cosmos-Server
โ๏ธ The Most Secure and Easy Selfhosted Home Server. Take control of your data and privacy without sacrificing security and stability (Authentication, anti-DDOS, anti-bot)
openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. โ Permify is now part of FusionAuth ๐
ayn2op / discordo
A lightweight, secure, and feature-rich Discord terminal (TUI) client.
ossf / scorecard
OpenSSF Scorecard - Security health metrics for Open Source
Ullaakut / cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
lc / gau
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
nicocha30 / ligolo-ng
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.