Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning β supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.
A cloud-native Go microservices framework with cli tool for productivity.
gRPC to JSON proxy generator following the gRPC HTTP spec
CLI tool for spawning and running containers according to the OCI specification
The toolkit to pack, ship, store, and deliver container content
Swagger 2.0 implementation for go
Generate Go client and server boilerplate from OpenAPI 3 specifications
Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards and inspections.
Gentle-AI configures the AI coding agents you already use: Claude Code, Cursor, OpenCode, Codex, Pi, and more. Choose persistent memory, Organic-Driven Development, curated skills, MCP servers, personas, and optional bounded review. Open source, no agent lock-in.
solar charging βοΈπ
Simple and fast anti-censorship tool written in Go
Fortio load testing library, command line tool, advanced echo server and web UI in go (golang). Allows to specify a set query-per-second load and record latency histograms and other useful stats.
OCI Runtime Specification
Six Degrees of Domain Admin
zot - A scale-out production-ready vendor-neutral OCI-native container image/artifact registry (purely based on OCI Distribution Specification)
Lightweight service virtualization/ API simulation / API mocking tool for developers and testers
:sailboat: The immutable, decentralized, statically built p2p VPN without any central server and automatic discovery! Create decentralized introspectable tunnels over p2p with shared tokens
net/http.Client like HTTP Client with options to select specific client TLS Fingerprints to use for requests.
Go HardWare discovery/inspection library
Network packet processor with a friendly UI for circumventing Deep Packet Inspection (DPI) systems.
Golang Fuego - Web framework generating OpenAPI 3 spec from source code - Pluggable to existing Gin & Echo APIs
Siri Shortcuts Programming Language π
A persistent, Git-versioned map of your whole codebase and database schema that coding agents read before they touch anything. Local-first MCP server + CLI in Go: a governed repository index of code knowledge that gives Claude Code, Codex, Cursor, and opencode long-term context, memory, and code intelligence.
A minimal, extensible, agent-native knowledge repository that keeps shared context current and inspectable
OpenAPI Diff and Breaking Changes
Engineering decisions engine that know when they're stale. Frame, compare, decide β with evidence decay and parity enforcement. For Claude Code, Cursor, Gemini CLI, Codex and more.
Install our local first extensions for your favorite AI IDE or Terminal Agent. Process your histories into reusable skills with Lore. Sync your conversations to the cloud. File issues and requests.
A distributed job server built specifically for queuing and executing heavy SQL read jobs asynchronously. Separate out reporting layer from apps. MySQL, Postgres, ClickHouse.
Agentic development harness for Claude Code β SPEC-driven plan/run/sync, TRUST 5 quality gates, model+effort routing, and ClaudeΓGLM multi-LLM cost control. Single Go binary, 16 languages, zero deps.
vacuum is the worlds fastest and most versatile OpenAPI, Arazzo, AsyncAPI & JSON Schema linter, docs generator and toolkit. It tears through API specs at light speed. 100% compatible with Spectral rulesets, and OpenAPI 3.0, 3.1 and 3.2
CLI tool for inspecting and managing services listening on localhost ports
Go implementation of the XDG Base Directory Specification and XDG user directories
Azure Data Exporter for BloodHound
libopenapi is a fully featured, high performance OpenAPI 3.2, 3.1, 3.0, Overlays and Arazzo parser, library, validator and toolkit for go applications.
GraphQL Router / API Gateway framework written in Golang, focussing on correctness, extensibility, and high-performance. Supports Federation v1 & v2, Subscriptions & more.
βΎοΈ Private Agent Fleet with Spec Coding. Each agent gets their own GPU-accelerated desktop. Run Claude, Codex, Gemini and open models on a full private AI Stack βΎοΈ
Community Cryptography Specification Project
A task scheduler built with Go and Vue.js that allows users to specify recurring jobs via a simple YAML configuration file. The scheduler reads job definitions, executes commands at specified times using cron expressions, and passes in environment variables for each job.
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
Fully featured, spec-compliant HTML5 server-sent events library
A layer 1 daemon, for the Taproot Assets Protocol specification, written in Go (golang)
htop for your ports. Inspect processes, Docker & systemd, detect port drift, audit Compose, and manage it all from TUI, Web or Cockpit.
WhatsApp Desk is a fast, ultra-lightweight, privacy-respecting desktop client for WhatsApp Web. Built with native operating system web engines β WebKit on macOS, WebView2 on Windows, and WebKitGTK on Linux. Zero Electron bloat β’ Zero telemetry β’ Zero message relay servers β’ Complete local privacy.
Docker Sandbox Kit Specification v3 - the kit descriptor grammar, the OCI artifact, the build frontend, and the conformance suites
Fast, friendly CLI and TUI for Apache Kafka: inspect clusters, move messages, watch lag, and fix things from one binary.
BootAgent is a local management tool of AI agents. It turns a fresh machine into a usable, repeatable setup without asking you to edit several tool-specific config files by hand.
A sandbox for the third-party APIs you depend on. Built from the provider's spec, it fails on purpose, and it replays the exact failure production hit.
Specification, tooling, and documentation for the .sightmap spec.
Fast, zero-dependency access log analyzer, security threat inspector, and TUI dashboard for Caddy v2
X-Science β an open-source biomedical research workspace. Apache-2.0 with component-specific third-party terms.
Open-source OpenAPI SDK generator for building production-ready client libraries. Available under AGPL-3.0; contact Speakeasy for commercial licensing options.
A personal toolkit for inspecting and unpacking WeChat mini-program packages
Pure-Go native-library emulation framework: load Android AArch64 .so files and call their functions directly β no JVM, no device, zero cgo (libunicorn runtime-loaded via purego). Real bionic, JNI-spec reference lifecycle, engine pool for concurrent use, shared read-only pages, transactional hooks.