openai / codex-security

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

yyhuni / lunafox

Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerability management.

zan8in / afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

shinthink / blitzstrike

Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

dwisiswant0 / crlfuzz

A fast tool to scan CRLF vulnerability written in Go

ErSilh0x / VULNaware

Open-source vulnerability prioritization engine that enriches scanner findings with vulnerability intelligence, identifies urgent risks, and automates alerts and ITSM ticketing.

kulkarnirohit123 / cra-agent

Autonomous agentic AI for CRA (Cyber Resilience Act) compliance: scans repos, triages findings, opens Jira tickets, and auto-fixes vulnerabilities via PR.

AngusKit / AngusSecurity

Application security and governance platform — one check covers code flaws, leaked secrets, and dependency/image vulnerabilities, with merge/release gates. Self-hostable.

MorDavid / NucleiSniper

AI-powered Nuclei template prioritization using deep target fingerprinting and TypeSafe Jev to surface relevant security findings faster.

topscoder / nuclei-wordfence-cve

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒