#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended
blackvectorops/semantic_firewallGenerate deterministic semantic fingerprints for Go functions. Detect xz-style backdoors and verify semantic equivalence using Static Single…
vhscom/private-landing🔐 Learn authentication by building it right. An extensible, standards-compliant reference implementation for Cloudflare Workers with Hono, Turso,…
owasp/threat-modeling-playbookStructured playbook for integrating threat modeling into product security, covering stakeholder buy-in, organizational embedding, training, process…
darkarnium/log4j-cve-detectDetections for CVE-2021-44228 inside of nested binaries
alegrey91/vex8sSuppress vulnerabilities applying Kubernetes context to scans
tejasprasad2008-afk/tracetreeRuntime behavioral analysis tool that sandboxes suspicious packages in Docker, traces syscalls with strace, maps process cascades into directed…
vrn21-arcanist/bouvetSandbox for Agents
danielbohannon/devsec-defenseAccompanying PowerShell Modules for DevSec Defense Presentation
securityuniversalorg/secusphereCentralized DevSecOps platform for vulnerability management, CI/CD security integration, automated security assessment aggregation, and fostering…
aquasecurity/vexhubAggregates Vulnerability Exploitability eXchange (VEX) documents from open-source projects. Organizes by PURL for automated security tool integration.
xlab-si/iac-scan-runnerService that scans your Infrastructure as Code for common vulnerabilities
rakosn1cek/oversightA lightweight security auditor and sandbox for shell scripts. Oversight combines a Static Analysis engine (Rust) with Dynamic Enforcement (Linux…
lucab85/log4j-cve-2021-44228Ansible playbook automating Red Hat's Log4j detector script to scan Linux hosts for CVE-2021-44228 (Log4Shell) vulnerability with GPG verification.
manishrawat21/cisa-kev-threat-intel-orchestratorZero-touch pipeline that turns newly weaponized CVEs from the CISA Known Exploited Vulnerabilities (KEV) catalog into production-ready Sigma…
rezmoss/sbomlyzeGit diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.
iocx-dev/iocxAn extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation and modern…
nccgroup/cowcloudServerless AWS solution for distributing recon and vulnerability scanning workloads. Submit tasks via web UI; EC2 workers execute custom Python…
aaravmaloo/apmA local password manager for everyone
