DevSecOps

nccgroup/ccs

Regex-based scanner for detecting hard-coded credentials in codebases, designed for CI/CD integration with suppression comment support and low…

momenbasel/malware-check

Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations

chrilleweb/dotenv-diff

Validate environment variable usage in codebase

synacktiv/shh

Systemd Hardening Helper - Mirror of https://github.com/desbma/shh

michaels1011/ephemora-cell

Capability-based WASM runtime for executing untrusted AI-generated code with enforced CPU, memory, time, I/O, and filesystem limits. Provides…

use-tusk/tusk-cli

Automated testing suite with live traffic record and replay

aaaguirrep/offensive-docker-vps

Create a VPS on Google Cloud Platform or Digital Ocean easily with Offensive Docker included to launch assessment to the targets.

horizon3ai/h3-cli

CLI tool for the Horizon3.ai API

crucible-security/crucible

pytest for AI agents - Autonomous red-teaming, behavioral monitoring & security testing for LLM agents

eth0izzle/security-skills

A collection of Claude Code skills that help security teams stay secure

chris-anley/cq

CQ, a code security scanner

nabroleonx/dbslice

Extract a slice of your production database to reproduce bugs locally. Point dbslice at a record, it follows foreign keys and gives you a complete,…

pigyon/mcpwner

Model Context Protocol server for autonomous vulnerability discovery

wavestone-cdt/defcon-cicd-pipelines-workshop

Hands-on CI/CD pipeline security workshop with Terraform lab, AWS exploitation, Kubernetes escape, and artifact backdooring exercises for offensive…

dev-sec/mysql-baseline

DevSec MySQL Baseline - InSpec Profile

gitlab-org/security-products/protocol-fuzzer-ce

This is the community edition of GitLab's protocol fuzzing framework. This framework is based on Peach Fuzzer Professional with some features removed.