DevSecOps

rivet-dev/sandbox-agent

A durable process per agent, with memory that survives restarts

owasp-dep-scan/dep-scan

Next-generation dependency vulnerability scanner with reachability analysis, SBOM generation, license audit, and container image scanning for CI/CD…

owasp-noir/noir

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

controlplaneio/kubesec

Security risk analysis for Kubernetes resources

tellerops/teller

Cloud native secrets management for developers - never leave your command line for secrets.

siriusscan/sirius

Open-source vulnerability scanner with automated network discovery, CVE-based detection, CVSS scoring, risk dashboards, remote agents via gRPC, and a…

securecodebox/securecodebox

Kubernetes-native security scanning orchestrator that automates continuous vulnerability detection by integrating multiple open-source scanners into…

xalgord/xalgorix

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

safedep/vet

Protect against malicious open source packages 🤖

vicanso/pingap

A reverse proxy like nginx, built on pingora, simple and efficient.

ascit31/dark-moon

Autonomous AI pentesting engine, continuous offensive security across web, cloud, AD & Kubernetes. Agentic reasoning + real exploit execution deliver…

mongodb/kingfisher

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.

dev-sec/linux-baseline

InSpec-based compliance profile for auditing Linux system hardening against security baselines, ensuring consistent configuration across…

cisco-ai-defense/defenseclaw

Security Governance for Agentic AI

nozaq/terraform-aws-secure-baseline

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational…

secretlint/secretlint

Pluggable linting tool to prevent committing credential.