openvas-scanner
greenbone/openvas-scannerThis repository contains the scanner component for Greenbone Community Edition.
configuration-auditingcontainer-securitydatabase-security+5
greenbone/openvas-scannerThis repository contains the scanner component for Greenbone Community Edition.
cilium/tetragoneBPF-based Security Observability and Runtime Enforcement
ed1s0nz/cyberstrikeaiThe system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…
anthropic-experimental/sandbox-runtimeA lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
nolabs-ai/nonoagent runtime security - zero trust, zero setup, zero latency agent sandbox
bomfather/agenteBPF-based Linux agent that enforces executable-level access policies in kernel space, sandboxing processes and restricting file, network, and GPU…
aipentest/cyberstrikeaiThe system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…
future-architect/vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
kubearmor/kubearmorRuntime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF,…
chaos-mesh/chaos-meshA Chaos Engineering Platform for Kubernetes.
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
falcosecurity/falcoReal-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…
beelzebub-labs/beelzebubA secure low code deception runtime framework, leveraging AI for System Virtualization.
pbxqdown/portclueExplain why a Linux TCP port may or may not be reachable
cybereason-public/owlsmSigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
ziad-hsn/cpraCPRA is a high-performance infrastructure monitoring system designed for platform teams managing large-scale microservice architectures. Built on…
gen0sec/jailerJailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage…
decalage2/awesome-security-hardeningA collection of awesome security hardening guides, tools and other resources