#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended
ariesq/gh-safe-repoPython CLI that creates GitHub repos with safe defaults — branch protection, Dependabot, secret scanning, and pre-flight security scanning — applied…
anchore/syftCLI tool and library for generating a Software Bill of Materials from container images and filesystems
firelock-ai/kinSemantic graph-based version control for AI-written code. Tracks entities and relations instead of file diffs, enabling blast radius analysis, shadow…
safedep/vetProtect against malicious open source packages 🤖
owasp/docksecAI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.
ostorlab/oxoModular security scanning orchestrator that combines specialized agents for vulnerability detection, reconnaissance, and fingerprinting across…
serverless/serverlessCLI framework for deploying and managing serverless applications on AWS Lambda with YAML infrastructure, local development, and multi-language…
horizon3ai/h3-cliCLI tool for the Horizon3.ai API
dnscontrol/dnscontrolInfrastructure as code for DNS!
git-pkgs/proxyA lightweight caching proxy for package registries.
stackrox/kube-linterKubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…
vicanso/pingapA reverse proxy like nginx, built on pingora, simple and efficient.
perplexityai/bumblebeeRead-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software…
owasp-noir/noirHunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
cynative/cynativeRead-only AI agent that queries your cloud, code, and runtime infrastructure to surface misconfigurations, leaked secrets, and privilege escalation…
garrytan/gstackUse Garry Tan's exact Claude Code setup: 23 opinionated tools that serve as CEO, Designer, Eng Manager, Release Manager, Doc Engineer, and QA
vercel-labs/deepsecAgent-powered vulnerability scanner for large-scale codebases. Uses LLMs to find hard-to-detect security issues via regex matchers and AI…
glincker/sslxA fast, modern alternative to OpenSSL's CLI - inspect, grade, and manage certificates from the terminal
