GitHub stars · StarDay

1wazuh / wazuhWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.C++License not declared17,602

2CISOfy / lynisLynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.ShellGPL-3.0 · Share derivative source16,647

3projectdiscovery / nuclei-templatesCommunity curated list of templates for the nuclei engine to find security vulnerabilities.JavaScriptMIT · Permissive13,297

4future-architect / vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devicesGoGPL-3.0 · Share derivative source12,330

5kubescape / kubescapeKubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.GoApache-2.0 · Permissive11,849

6dependency-check / DependencyCheckOWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.JavaApache-2.0 · Permissive7,762

7GhostTroops / scan4allOfficial repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...GoBSD-3-Clause · PermissiveInactive6,193

8deepfence / ThreatMapperOpen Source Cloud Native Application Protection Platform (CNAPP)TypeScriptApache-2.0 · Permissive5,329

9greenbone / openvas-scannerThis repository contains the scanner component for Greenbone Community Edition.RustGPL-2.0 · Share derivative source4,924

10DependencyTrack / dependency-trackDependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.JavaApache-2.0 · Permissive4,420

11scipag / vulscanAdvanced vulnerability scanning with Nmap NSELuaLicense not declaredInactive3,794

12ysrc / xunfengXunfeng is a vulnerability rapid response and巡航 scanning system suitable for enterprise internal networks.PythonGPL-3.0 · Share derivative sourceInactive3,590

13vulnersCom / nmap-vulnersNmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.LuaLicense not declared3,511

14Checkmarx / kicsFind security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.Open Policy AgentApache-2.0 · Permissive2,730

15CERT-Polska / ArtemisA modular vulnerability scanner with automatic report generation capabilities.PythonBSD-3-Clause · Permissive1,259