vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
vxcontrol / pentagi
cisagov / ScubaGear
Automation to assess the state of your M365 tenant against CISA's baselines
usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
xonsh / xonsh
🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.
We5ter / Scanners-Box
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
securego / gosec
Go security checker
apache / caldera
Automated Adversary Emulation Platform
infobyte / faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
DefectDojo / django-DefectDojo
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
DependencyTrack / dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Yamato-Security / hayabusa
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
CyberStrikeus / CyberStrike
Open-source AI-powered offensive security harness for automated penetration testing.
GH05TCREW / pentestagent
PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Shuffle / Shuffle
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
0xSteph / pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
Kritt-ai / open-kritt
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
konstruktoid / hardening
Hardening Ubuntu. Systemd edition.
ossf / cve-bin-tool
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
fkie-cad / FACT_core
Firmware Analysis and Comparison Tool
berylliumsec / nebula
Cybersecurity Harness
APTRS / APTRS
Automated pentest reporting with custom templates, project tracking, customer dashboard and client management tools. Streamline your security workflows effortlessly!
DataDog / KubeHound
Tool for building Kubernetes attack paths
reconmap / reconmap
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.
secureCodeBox / secureCodeBox
secureCodeBox (SCB) - continuous secure delivery out of the box
aws-solutions / aws-waf-security-automations
This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
rust-secure-code / cargo-auditable
Make production Rust binaries auditable
s0ld13rr / pentestcode
PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.
flosell / trailscraper
A command-line tool to get valuable information out of AWS CloudTrail
google / turbinia
Automation and Scaling of Digital Forensics Tools
CycodeLabs / raven
CI/CD Security Analyzer
yyhuni / xingrin
Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.
gitleaks / gitleaks-action
Protect your secrets using Gitleaks-Action
pablosnt / rekono
Offensive security platform that automates attack surface discovery and vulnerability management
factionsecurity / faction
Pen Test Report Generation and Assessment Collaboration
utmstack / UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
CybercentreCanada / assemblyline
Assemblyline 4: File triage and malware analysis
zricethezav / h1domains
HackerOne "in scope" domains
adshao / flounder
Autonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.
CrowdStrike / falconpy
The CrowdStrike Falcon SDK for Python
jassics / cybersecurity-roadmap
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
bdg9412 / artex-ko-plus
ARTEX 한국어판 ·AI 기반 침해사고 대응 기능 추가 (upstream: Autumn-27/ARTEX, AGPL-3.0)
decionis / docker
Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.
SailorMo0nEpic / soc-automation-update-channel
SOC Automation Security Suite Installer and Update Hub 2026
BushANQ / DRX-Operator
—
ErSilh0x / VULNaware
Open-source vulnerability prioritization engine that enriches scanner findings with vulnerability intelligence, identifies urgent risks, and automates alerts and ITSM ticketing.
MorDavid / NucleiSniper
AI-powered Nuclei template prioritization using deep target fingerprinting and TypeSafe Jev to surface relevant security findings faster.
Ed-Marcavage / awesome-security-agent-harnesses
AI agents for pentesting, code audit, fuzzing, vulnerability discovery, and reverse engineering: harnesses, sandboxes, security MCP servers, benchmarks, and evals.
JoasASantos / NeuroPurple
The AI Autonomous SOC & Purple-Team Engine
armourinfosec / Python-for-Security-Professionals
Python for Security Professionals — lab-driven study notes: language fundamentals, the standard library, concurrency and packaging, then building port scanners, log analysers, and recon tooling. 14 modules, 8 labs, 16 projects, 138 flashcards. CC BY 4.0.