DevSecOps

usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

serverless/serverless

CLI framework for deploying and managing serverless applications on AWS Lambda with YAML infrastructure, local development, and multi-language…

hashicorp/vault

A tool for secrets management, encryption as a service, and privileged access management

nanocoai/nanoclaw

A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging…

certbot/certbot

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…

projectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

shieldfy/api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

restic/restic

Fast, secure, efficient backup program

trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

analysis-tools-dev/static-analysis

Curated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…

mobsf/mobile-security-framework-mobsf

Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…

infisical/infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

gravitational/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

promptfoo/promptfoo

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and…

nvidia/nemoclaw

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference