GitHub stars · StarDay

1KeygraphHQ / shannonAn AI-assisted security tester for web applications and APIs.TypeScriptAGPL-3.0 · Share derivative source51,324

2aquasecurity / trivyA scanner for security issues in containers, code and cloud environments.GoApache-2.0 · Permissive39,051

3mukul975 / Anthropic-Cybersecurity-Skills817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0PythonApache-2.0 · Permissive35,700

4gitleaks / gitleaksFind secrets with Gitleaks 🔑GoMIT · Permissive30,603

5Infisical / infisicalInfisical is the open-source platform for securing secrets, certificates, access, and AI Agents.TypeScriptLicense not declared30,219

6trufflesecurity / trufflehogFind, verify, and analyze leaked credentialsGoAGPL-3.0 · Share derivative source28,820

7MobSF / Mobile-Security-Framework-MobSFMobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.PythonGPL-3.0 · Share derivative source22,153

8prowler-cloud / prowlerAuthor description: This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.PythonApache-2.0 · Permissive15,182

9bytebase / bytebaseDatabase governance built for humans and agents — controlling changes and access across every major database.GoLicense not declared14,685

10gravitl / netmakerPlatform for automating distributed virtual networks built with WireGuard.GoLicense not declared11,856

11openai / codex-securityOpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-securityTypeScriptApache-2.0 · Permissive11,310

12bunkerity / bunkerweb🛡️ Open-source and cloud-native Web Application Firewall (WAF)PythonAGPL-3.0 · Share derivative source11,229

13xonsh / xonsh🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.PythonLicense not declared9,685

14We5ter / Scanners-BoxThe Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents - A matrix of all-domain open-source network security tools for geeks, enterprises, and AI agentsLicense not declared9,181

15firezone / firezoneBlazing-fast remote accessElixirApache-2.0 · Permissive9,169

16turbot / steampipeZero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.GoAGPL-3.0 · Share derivative source7,997

17lintsinghua / DeepAuditDeepAudit: Everyone has an AI hacker team that makes vulnerability mining within reach. One-click deployment and operation by Xiaobai, autonomous collaborative audit + automated sandbox PoC verification. Supports Ollama private deployment and generates reports with one click. Support transfer station. Make security no longer expensive and audit no longer complex.PythonAGPL-3.0 · Share derivative source7,257

18aquasecurity / tfsecTfsec is now part of TrivyGoMIT · Permissive7,060

19sottlmarek / DevSecOpsUltimate DevSecOps libraryMIT · Permissive6,943

20infobyte / faradayOpen-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.PythonGPL-3.0 · Share derivative source6,839