Tools

agrawalsmart7/scodescanner

Command-line static analysis scanner that detects critical vulnerabilities in PHP and YAML source code using custom semgrep rules, with Jira and…

nccgroup/matt.net

Matt.Net is a simple GUI wrapper around Microsoft's CAT.NET Code Auditing Tool

luiscastellanos-dev/cobol-shield

Security hardening toolkit for COBOL legacy systems — invisible Unicode detection, format boundary analysis, source transformation integrity

rajsidwadkar/uap-protocol

A unified, security-first wire protocol for tool access and agent coordination. UAP eliminates CVE-2025-49596 and MCP tool-poisoning vulnerabilities…

securego/gosec

Go security checker

owasp/glue

Application Security Automation

chris-anley/cq

CQ, a code security scanner

shieldfy/api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

gravitational/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

github/codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

openai/codex-security

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm:…

vicanso/pingap

A reverse proxy like nginx, built on pingora, simple and efficient.

cloudprober/cloudprober

An active monitoring software to detect failures before your customers do.

canyonroad/agentsh

Execution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.

vercel-labs/fix-react2shell-next

One command to fix CVE-2025-66478 (React 2 Shell RCE) in your Next.js / React RSC app.

robocoder/rips-scanner

RIPS - A static source code analyser for vulnerabilities in PHP scripts

kevinslin/safe-npm

Safely install NPM packages

boratanrikulu/gobee

Write your BPF programs in Go, not C. gobee transpiles a Go subset to BPF C and generates typed cilium/ebpf bindings.