GitHub stars · StarDay

1wazuh / wazuhWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.C++License not declared17,602

2CISOfy / lynisLynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.ShellGPL-3.0 · Share derivative source16,647

3prowler-cloud / prowlerAuthor description: This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.PythonApache-2.0 · Permissive15,184

4future-architect / vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devicesGoGPL-3.0 · Share derivative source12,330

5google / osv-scannerVulnerability scanner written in Go which uses the data provided by https://osv.devGoApache-2.0 · Permissive11,437

6dependency-check / DependencyCheckOWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.JavaApache-2.0 · Permissive7,762

7presidentbeef / brakemanA static analysis security vulnerability scanner for Ruby on Rails applicationsRubyLicense not declared7,292

8infobyte / faradayOpen-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.PythonGPL-3.0 · Share derivative source6,842

9martin-olivier / airgorahA WiFi security auditing softwareRustMIT · Permissive5,052

10charles2gan / GDA-android-reversing-ToolAuthor description: the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.PythonApache-2.0 · PermissiveInactive4,875

11scipag / vulscanAdvanced vulnerability scanning with Nmap NSELuaLicense not declaredInactive3,794

12aquasecurity / cloudsploitCloud Security Posture Management (CSPM)JavaScriptGPL-3.0 · Share derivative source3,790

13ysrc / xunfengXunfeng is a vulnerability rapid response and巡航 scanning system suitable for enterprise internal networks.PythonGPL-3.0 · Share derivative sourceInactive3,590

14codingo / NoSQLMapAutomated NoSQL database enumeration and web application exploitation tool.PythonGPL-3.0 · Share derivative source3,374

15goodwithtech / dockleAuthor description: Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to startGoApache-2.0 · Permissive3,299

16nuver-labs / vps-auditlightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.ShellMIT · Permissive3,250

17Bearer / bearerCode security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.GoLicense not declared2,785

18retracedhq / retraced🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀TypeScriptApache-2.0 · Permissive451

19r3vn / badKarmanetwork reconnaissance toolkitPythonGPL-3.0 · Share derivative sourceInactive437

20dogoncouch / LogESPOpen Source SIEM (Security Information and Event Management system).PythonMIT · PermissiveInactive227