#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended
garrytan/gstackUse Garry Tan's exact Claude Code setup: 23 opinionated tools that serve as CEO, Designer, Eng Manager, Release Manager, Doc Engineer, and QA
anomalyco/opencodeThe open source coding agent.
usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
serverless/serverlessCLI framework for deploying and managing serverless applications on AWS Lambda with YAML infrastructure, local development, and multi-language…
hashicorp/vaultA tool for secrets management, encryption as a service, and privileged access management
nanocoai/nanoclawA lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging…
usebruno/brunoOpensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
certbot/certbotCertbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…
restic/resticFast, secure, efficient backup program
trufflesecurity/trufflehogFind, verify, and analyze leaked credentials
infisical/infisicalInfisical is the open-source platform for secrets, certificates, and privileged access management.
aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
mobsf/mobile-security-framework-mobsfAutomated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…
analysis-tools-dev/static-analysisCurated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…
promptfoo/promptfooTest your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and…
shieldfy/api-security-checklistChecklist of the most important security countermeasures when designing, testing, and releasing your API
nvidia/nemoclawRun agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference
