#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended
slowql/slowqlNext-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality.…
devsecopsdocs/nuclearpondNuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.
lore-hex/quill-routerTrustedRouter.com repo for secure LLM proxying
zeroecco/holosDeclarative KVM/QEMU VM orchestration tool using YAML compose files. Manages multi-VM stacks with cloud-init, SSH, PCI passthrough, and image…
ibm-security/ibmsecurityIdempotent functions for IBM Security Appliance REST APIs. Currently covering ISAM and ISDS Appliances.
papermtn/gitlab-watchmanFinding exposed secrets and personal data in GitLab
avito-tech/deepsecretsStatic analysis tool that scans source code for hardcoded secrets, API keys, and credentials using semantic understanding of code context.
fazmin/cve-intelLocal security intelligence for CVE triage - 40 data sources and 41 tools, risk scores and an MCP server for AI agents, all in native Rust. Private…
projectdiscovery/nuclei-templates-labsVulnerable environments paired with ready-to-use Nuclei templates for security testing and learning! 🚀
guilherme-grimm/graph-gosimply nodes and graphs
wardgate/wardgateSecurity gateway for AI agents - credential-isolated API proxying and policy-gated remote execution (conclaves). Reduce the blast radius!
coreruleset/ftwYAML-driven framework for testing Web Application Firewall (WAF) rules using OWASP Core Rule Set baselines. Automates regression detection and…
faloker/purifyAll-in-one tool for managing vulnerability reports from AppSec pipelines
kvesta/vestaA static analysis of vulnerabilities, Docker and Kubernetes cluster configuration detect toolkit based on the real penetration of cloud computing
tindersec/gh-workflow-auditorScript to audit GitHub Action Workflow files for potential vulnerabilities.
xaaha/hulakA lightweight, file-based CLI API client with age-encrypted secrets, first-class GraphQL support, and a built-in MCP server for AI agent workflows.
inceptionstack/lowkeyDeploy self-hosted AI coding agents (OpenClaw, Claude Code, Codex) into your AWS account with CloudFormation, IAM profiles, and sandbox isolation for…
