


OpenSSF Scorecard - Security health metrics for Open Source

Open source vulnerability DB and triage service.

Open Source Cloud Native Application Protection Platform (CNAPP)

An open source threat modeling tool from OWASP

Open source solutions for SOC2, GDPR, and ISO27001

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It…

OpenAnt from Knostic is the leading open source LLM-based vulnerability discovery product, helping defenders proactively find verified security flaws…

Protect against malicious open source packages 🤖

A tool to capture all the git secrets by leveraging multiple open source git searching tools

ProjectDiscovery's Open Source Tool Manager

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

An open source, cloud-native security to protect everything from build to runtime

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and…

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with…

Open Source runtime scanner for k8s cluster and perform security audit checks based on CIS Kubernetes Benchmark specification

100% Free & Open Source • Privacy-First Security Scanning and AI Code Review CLI