vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
vxcontrol / pentagi
KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
sqlmapproject / sqlmap
Automatic SQL injection and database takeover tool
apache / caldera
Automated Adversary Emulation Platform
jassics / security-study-plan
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
wallarm / gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
akto-api-security / akto
Akto is the fastest growing AI Security platform for your teams to secure AI agents, MCPs, LLMs, Agent skills, Gen AI apps in your organization.
tophant-ai / aibeat
Break your AI before they do. Join Discord: https://discord.gg/NXXz8JG74
secureCodeBox / secureCodeBox
secureCodeBox (SCB) - continuous secure delivery out of the box
s0ld13rr / pentestcode
PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.
bahattinkoc / ipaverse
Download, re-sign, and sideload iOS, iPadOS, macOS, tvOS & visionOS apps without Xcode or Terminal — plus an authorized security-testing toolkit (ATS bypass, Frida injection, static scan, FairPlay dump).
OWASP / OFFAT
The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.
yyhuni / xingrin
Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.
OWASP / www-project-web-security-testing-guide
The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.
KeyValueSoftwareSystems / agent-opfor
Open-source adversary emulation for AI agents and MCP servers.
dodoguardai / dodoguard
DodoGuard: Take AI Agents to Production. Test, validate, and operate AI Agents before and after deployment.for Dify, Coze, FastGPT, n8n, Tencent ADP, ByteDance HiAgent, and more.
stijnswapped / Myrqen
Security testing that runs inside the coding agent you already use. Source-available, not open source.
MorDavid / NucleiSniper
AI-powered Nuclei template prioritization using deep target fingerprinting and TypeSafe Jev to surface relevant security findings faster.
DuskSwordsmanWrath / Burp-Suite-Professional
Burp Suite Professional for Windows — the complete professional build with every module enabled: HTTP inspection, web security testing, and API analysis, no edition limits after install.