KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
KeygraphHQ / shannon
lissy93 / web-check
🕵️♂️ All-in-one OSINT tool for analysing any website
Infisical / infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
lissy93 / personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
onecli / onecli
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
CyberStrikeus / CyberStrike
Open-source AI-powered offensive security harness for automated penetration testing.
ChiChou / grapefruit
Open-source mobile security testing suite for iOS and Android. Previously Passionfruit
reversenseorg / dexcalibur
Reversense (Dexcalibur2) is a fully rewriting and rethinking of Dexcalibur. Reversense is a binary intelligence platform that automates the reverse engineering of mobile and embedded applications.
reconmap / reconmap
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.
phasehq / console
Secrets management for teams and AI agents.
openqodex / openqodex
Open source code review that runs in your coding agent before you push. Scanners plus a separate AI reviewer, on your own login, no key.
OWASP / cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
yyhuni / xingrin
Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.
utmstack / UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
Escape-Technologies / graphql-armor
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
0sec-labs / 0
The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.
shinthink / blitzstrike
Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
S1N6H / pentest-harness
Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring your own AI model API; sessions stay local.
tsale / jevline
Jevline: start from one confirmed-malicious process; Jev links the rest of the incident into a timeline, execution chain and evidence table.
luantak / is-malicious
A codebase scanner that helps you not run malicous code
MingyiSecLab / Atlas
Open-source local AI Agent desktop app for authorized security assessment — Electron + Mastra-powered runtime, visual pentest workflow, Kali sandbox, multi-provider LLM routing. 本地 AI 安全评估智能体桌面应用