#1API testing, fuzzing, schema validation, authentication testing, and gateway security tools.
Kitploit recommended
openziti/zitiZero-trust networking platform that makes services invisible with cryptographic identity, policy-based access, and end-to-end encryption. Replaces…
rocketchat/rocket.chatThe Secure CommsOS™ for mission-critical operations
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
lsh123/xmlsecXML Security Library
keycloak/keycloakOpen Source Identity and Access Management For Modern Applications and Services
epi052/feroxbusterA fast, simple, recursive content discovery tool written in Rust.
symfony/symfonyThe Symfony PHP framework
git-pkgs/proxyA lightweight caching proxy for package registries.
owasp-noir/noirHunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
siriusscan/siriusOpen-source vulnerability scanner with automated network discovery, CVE-based detection, CVSS scoring, risk dashboards, remote agents via gRPC, and a…
luckypipewrench/pipelockOpen-source AI agent firewall that scans HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, emitting verifiable…
opnsense/coreOPNsense GUI, API and systems backend
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
usebruno/brunoOpensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)
akto-api-security/aktoOpen-source API security platform for continuous API discovery, vulnerability testing, and runtime threat detection. Integrates with CI/CD pipelines…
lore-hex/quill-routerTrustedRouter.com repo for secure LLM proxying
elementalsouls/claude-bughunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24…
owasp/nettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
