nuclei
projectdiscovery/nucleiNuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling…
vulnerability-scannersweb-vulnerability-scannersapi-security-testing+8
30.4k
API key scanning, credential leak detection, and secret management tools.
projectdiscovery/nucleiNuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling…
synacktiv/octoscanOctoscan is a static vulnerability scanner for GitHub action workflows.
gitguardian/ggshieldDetect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret…
freelabz/secatorsecator - the pentester's swiss knife
mindersec/minderSoftware Supply Chain Security Platform
dracondev/dracon-utilitiesInvisible infrastructure for Dracon developer workspaces: git sync, system guard, and warden encryption utilities.
wattocyber/masqLive recon and posture auditing for AI agent infrastructure: scans MCP configs, session logs, and APIs for secrets, poisoned catalogs, and CoT leaks.
jitpass/jitFind the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and…
cybertix-pvt-ltd/one-liner-collectionsThis Repositories contains list of One Liners with Descriptions and Installation requirements
hotstartlabs/siftCredential and sensitive-data exposure triage for file shares
gmh5225/actions-secretsAdding this GitHub Action will scan your repository for sensitive data in your source code. We find things like passwords, server host strings, API…
aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
hashicorp/vaultA tool for secrets management, encryption as a service, and privileged access management
gitleaks/gitleaksFast, open-source static analysis tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories, files, and stdin…
infisical/infisicalInfisical is the open-source platform for secrets, certificates, and privileged access management.
trufflesecurity/trufflehogFind, verify, and analyze leaked credentials
shieldfy/api-security-checklistChecklist of the most important security countermeasures when designing, testing, and releasing your API
getsops/sopsSimple and flexible tool for managing secrets