#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended

Generates least-privilege AWS IAM policies based on resource ARNs and access levels, automating secure policy creation for cloud infrastructure.

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It…

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

Chaos testing, network emulation, and stress testing tool for containers

Runtime application self-protection engine that hooks into application servers to monitor and block malicious database queries, file operations, and…

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…

Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.

Open source solutions for SOC2, GDPR, and ISO27001

☸️ The Open Testing Platform for AI-Driven Engineering Teams

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

A GitHub Action invoking the Gemini CLI.

OpenAnt from Knostic is the leading open source LLM-based vulnerability discovery product, helping defenders proactively find verified security flaws…

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your…

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start


Intentionally vulnerable Terraform infrastructure for learning cloud misconfiguration detection and DevSecOps practices across AWS, Azure, and GCP.