open-sammy
owasp/open-sammyWeb-based tool for assessing and tracking software security maturity using the OWASP SAMM and DSOMM models, with Docker support and automated mailing.
cloud-securityconfiguration-auditingcontainer-security+3
owasp/open-sammyWeb-based tool for assessing and tracking software security maturity using the OWASP SAMM and DSOMM models, with Docker support and automated mailing.
marcstraube/zappzarapp-php-securityPHP 8.4+ security library (mirror)
anchore/grypeA vulnerability scanner for container images and filesystems
hashicorp/vaultA tool for secrets management, encryption as a service, and privileged access management
certbot/certbotCertbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…
projectdiscovery/pdtmProjectDiscovery's Open Source Tool Manager
raskrebs/sonarCLI tool for inspecting and managing services listening on localhost ports
mhaskar/bughoundStatic code analysis tool based on Elasticsearch
xenoncyber/envyA terminal based tool for managing secrets with both tui and cli support
helixar-ai/mcp-security-checklistMCP is being adopted rapidly. Security guidance is lagging behind. This checklist gives security engineers, platform teams, and technical leaders a…
davidnussio/envsecSecure CLI tool for managing environment secrets using native OS credential stores (macOS Keychain, Linux Secret Service, Windows Credential Manager)
nccgroup/matt.netMatt.Net is a simple GUI wrapper around Microsoft's CAT.NET Code Auditing Tool
rajsidwadkar/uap-protocolA unified, security-first wire protocol for tool access and agent coordination. UAP eliminates CVE-2025-49596 and MCP tool-poisoning vulnerabilities…
usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
getsops/sopsSimple and flexible tool for managing secrets
gitleaks/gitleaksFast, open-source static analysis tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories, files, and stdin…
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…