#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended

🐺 Vulfy – Fast Rust based package version scanner

A Public Package Scanner for The Community

Full-stack platform for authorized web application security scanning with a detector-based engine, async Celery workers, and a React dashboard for…

Scan. Redact. Commit clean.

Scan LLM outputs and AI-generated content for data exfiltration signals (EchoLeak, CVE-2025-32711) before they reach users or downstream systems

DaemonSet для митигации уязвимости CVE-2026-31431 (Copy Fail)

Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.

Obfuscates Go source code via AES-256 string encryption with runtime decryption, identifier renaming, and comment removal to hinder reverse…

Static security scanner for AI agent skill packages. Detects malicious SKILL.md files and bundled scripts before they run.

Managing GitHub Advanced Security (GHAS) Controls at Scale

A deterministic network sandbox for testing nftables rules. It uses ephemeral Linux network namespaces (netns) and Scapy to validate firewall logic…

provides a Firewall Manager API designed to centralize and streamline the management of firewall configurations

Dependency-free static analyzer for zk circuit soundness bugs in o1js/Mina zkApps and Noir circuits

Matt.Net is a simple GUI wrapper around Microsoft's CAT.NET Code Auditing Tool

Developer-focused knowledge base of application security vulnerabilities with insecure vs secure code examples, prevention guidance, and OWASP/CWE…

This enforces signatures for CVE-2021-44228 across all policies on a BIG-IP ASM device

Reachability triage for vulnerability scans. Feeds scanner findings to an LLM agent that reads your source and decides which CVEs are actually…

Scans local projects for CVE-2025-66478 vulnerability and reports affected instances without fixing them.