Tools

google/osv.dev

Open source vulnerability DB and triage service.

owasp/cve-lite-cli

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix,…

pigyon/mcpwner

Model Context Protocol server for autonomous vulnerability discovery

trailofbits/skills

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

pypa/pip-audit

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

reconmap/reconmap

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from…

gitguardian/ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret…

akto-api-security/akto

Open-source API security platform for continuous API discovery, vulnerability testing, and runtime threat detection. Integrates with CI/CD pipelines…

cloudquery/cloudquery

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from…

bearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

greenbone/openvas-scanner

This repository contains the scanner component for Greenbone Community Edition.

mobb-dev/bugsy

Automatic security vulnerability remediation for your code.

projectdiscovery/nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling…

zaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

infobyte/faraday

Open Source Vulnerability Management Platform

xalgord/xalgorix

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.