GitHub stars · StarDay

1wazuh / wazuhWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.C++License not declared17,602

2CISOfy / lynisLynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.ShellGPL-3.0 · Share derivative source16,647

3prowler-cloud / prowlerAuthor description: This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.PythonApache-2.0 · Permissive15,184

4open-policy-agent / opaOpen Policy Agent (OPA) is an open source, general-purpose policy engine.GoApache-2.0 · Permissive12,442

5bridgecrewio / checkovPrevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.PythonApache-2.0 · Permissive9,137

6codenotary / immudbimmudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change historyGoLicense not declared9,048

7kyverno / kyvernoUnified Policy as CodeGoApache-2.0 · Permissive8,320

8aquasecurity / tfsecTfsec is now part of TrivyGoMIT · PermissiveInactive7,059

9microsoft / agent-governance-toolkitAI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.PythonMIT · Permissive6,532

10cloud-custodian / cloud-custodianRules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resourcesPythonApache-2.0 · Permissive6,110

11deepfence / ThreatMapperOpen Source Cloud Native Application Protection Platform (CNAPP)TypeScriptApache-2.0 · Permissive5,329

12ossec / ossec-hidsOSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.CGPL-2.0 · Share derivative source5,069

13HotCakeX / Harden-Windows-SecurityHarden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨C#MIT · Permissive4,831

14intuitem / ciso-assistant-communityCISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.PythonLicense not declared4,590

15inspec / inspecInSpec: Auditing and Testing FrameworkRubyLicense not declared3,103

16snapotter-hq / SnapOtterOpen-source, self-hosted file-processing tool. Convert, compress, OCR, transcribe & run local AI across image, video, audio, PDF & documents, via UI, REST API & pipelines. Your files never leave your network.TypeScriptAGPL-3.0 · Share derivative source2,949

17Bearer / bearerCode security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.GoLicense not declared2,785

18nilsteampassnet / TeamPassSelf-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.PHPGPL-3.0 · Share derivative source1,890

19securitybunker / databunkerSecure Vault for Customer PII/PHI/PCI/KYC RecordsGoMIT · Permissive1,496

20lunasec-io / lunasecLunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/TypeScriptLicense not declaredInactive1,472