All repos — GH Trending Explorer

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

velero-io / velero

Backup and migrate Kubernetes applications and their persistent volumes

cloudnative-pg / cloudnative-pg

The most popular Kubernetes Operator for PostgreSQL.

lintsinghua / DeepAudit

DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。

CrunchyData / postgres-operator

Production PostgreSQL for Kubernetes, from high availability Postgres clusters to full-scale database-as-a-service.

EnterpriseDB / barman

Barman - Backup and Recovery Manager for PostgreSQL

zinja-coder / jadx-ai-mcp

Plugin for JADX to integrate MCP server

Bearer / bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

ajinabraham / nodejsscan

nodejsscan is a static security code scanner for Node.js applications.

google / mantis

A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.

betterleaks / betterleaks

Find leaked secrets everywhere.

m14r41 / PentestingEverything

lucasastorian / llmwiki

Open Source Implementation of Karpathy's LLM Wiki. Upload documents, connect your Claude account via MCP, and have it write your wiki !

scadastrangelove / awesome-ai-security-tools

A curated list of public-source, research, and commercial tools for AI security and AI-assisted cybersecurity — autotriage, agent security, AI/ML supply chain, pentest agents, AI SAST, LLM-driven fuzzing, threat intelligence, SOC/SIEM triage, reverse engineering, LLM red-teaming, and more.

controlplaneio / kubesec

Security risk analysis for Kubernetes resources

ZupIT / horusec

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

bareos / bareos

Bareos is a cross-network Open Source backup solution (licensed under AGPLv3) which preserves, archives, and recovers data from all major operating systems.

mongodb / kingfisher

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.

rear / rear

Relax-and-Recover - Linux bare metal disaster recovery and system migration solution (cfr. mksysb, ignite)

backube / volsync

Asynchronous data replication for Kubernetes volumes

Cyber-Buddy / APKHunt

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

openboxes / openboxes

OpenBoxes is a warehouse management system designed to manage inventory and track stock movements for healthcare facilities.

duriantaco / skylos

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

OWASP-Benchmark / BenchmarkJava

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

MobSF / mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

knostic / OpenAnt

OpenAnt from Knostic is the leading open source LLM-based vulnerability discovery and remediation product, helping defenders proactively find and patch verified security flaws while minimizing both false positives and negatives. Stage 1 detects. Stage 2 attacks. What survives is real.

openqodex / openqodex

Open source code review that runs in your coding agent before you push. Scanners plus a separate AI reviewer, on your own login, no key.

masastack / MASA.Framework

.NET next-generation microservice development framework, which provides cloud native best practices based on Dapr.

nealbridges / VulnHunter

Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them test-first. A maintained fork of Capital One's VulnHunter, rebuilt for any agent harness.

awslabs / automated-security-helper

ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine.

apecloud / ape-dts

ApeCloud's Data Transfer Suite, written in Rust. Provides ultra-fast data replication between MySQL, PostgreSQL, Redis, MongoDB, Kafka and ClickHouse, ideal for disaster recovery (DR) and migration scenarios.

AlexeyPechnikov / pygmtsar

PyGMTSAR (Python InSAR): Powerful and Accessible Satellite Interferometry

tis24dev / proxsave

Proxmox VE & PBS host configuration backup and disaster recovery. Online backups without downtime, guided restore, encryption, cloud storage and native PBS integration.

0sec-labs / 0

The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.

speed47 / dvdisaster

A tool providing additional ECC protection for optical media (unofficial version)

Token-Gremlin / natural-disasters

Fully procedural cinematic ocean and extreme weather simulation in the browser. Multi-cascade FFT waves, volumetric clouds, hurricanes and tsunamis - every pixel generated on the GPU at runtime, zero external assets. Three.js / WebGL2 / GLSL3.

openqa-cn / codexqa

codexqa: 11 local-first Agent Skills for Cursor, Claude Code, Codex & OpenClaw — change impact analysis, AI code review, defect scan, testcase generation, browser replay & RCA.

AuvroIslam / Nongor

Offline crisis companion for Bangladesh floods. Signed phone-to-phone SOS, flood-avoiding shelter routing, first aid and emergency translation for six languages Google Translate doesn't carry — no internet, no server, no account. Gemma 4 runs on the handset.

cocel-postech / genz-lio

GenZ-LIO: SOTA robust LiDAR-inertial odometry (IEEE T-FR 2026)

ahmadpiran / restoredrill

Proves your PostgreSQL and MySQL backups actually restore, before you find out the hard way.

MeshLive / meshlive-android

Encrypted voice and video calls, live audio and video streams between phones over a Bluetooth mesh. No internet needed.

Zuimeng-0710 / java-audit-lab

Evidence-driven Java security review workbench

joelin79 / TaiwanEEW-iOS

[A Gov. Collaboration Project] Taiwan’s No. 1 earthquake early warning app, developed in collaboration with the Central Weather Administration, delivering real-time, location-based alerts and predicted shaking intensity.

AngusKit / AngusSecurity

Application security and governance platform — one check covers code flaws, leaked secrets, and dependency/image vulnerabilities, with merge/release gates. Self-hostable.

THU-CST-SAST / AAArena

—

ShadowVoid-T-T / ResqLink-AI-Powered-Emergency-Response-Smart-Triage-Platform

AI-powered disaster response platform with offline Bluetooth mesh networking, real-time heatmap, and family safety tracking — built for JRABD Hackathon 2026

Junjue-Wang / DORA

[NeurIPS 2026 Oral] DORA: Can LLM Agents Respond to Disasters? Benchmarking Heterogeneous Geospatial Reasoning in Emergency Operations

ragib01-kuet / protidhwani

Protidhwani: A community-powered safety intelligence platform for reporting incidents, verifying information, accessing emergency support, and staying connected during crises.

gdamdam / awesome-resilient-communication

A curated list of open protocols, applications, hardware, and resources for communication during internet shutdowns, disasters, intermittent connectivity, censorship and off-grid operation.

SelmiAbderrahim / dockstash

Self-hosted backup orchestration for Docker — encrypted restic snapshots on storage you own, scheduled, with automated restore drills.

flukelaster / SIAHRA

3D geospatial hazard-intelligence platform for Thailand — real-time flood, rainfall, dam and earthquake monitoring on an interactive provincial digital terrain.

shellharbor / backfort

Backfort is a secure Linux backup and disaster recovery tool for files and Docker Compose. Create encrypted, compressed, verifiable backups with age, GPG, Minisign, rclone, S3-compatible storage, retention policies, database dumps, atomic publishing, safe restore, watchdog checks, and instant recovery workflows for servers.

xiaoyuyu6420 / dsh-backup

一条命令备份/恢复/迁移 DSH 全部数据（~/.dsh）：升级前快照、换机迁移（会话/插件/MCP/技能）、会话日志修复、进程外救援、凭据脱敏。One-command backup / restore / migration for DeepSeek Harness.

gromhacks / bonsai-ninja

🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compiler-backed facts for humans and AI.

designproart / offline-survival-manual

🛡️ A lightweight, 100% offline-first emergency preparedness manual and tactical first-aid guide for blackouts, grid-down scenarios, and off-grid disasters. Zero dependencies.