Tools

mindersec/minder

Software Supply Chain Security Platform

infisical/infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

semgrep/semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

deepfence/threatmapper

Open Source Cloud Native Application Protection Platform (CNAPP)

openclarity/openclarity

OpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure

h4x0r-dz/leaked-credentials

how to look for Leaked Credentials !

liamg/dismember

:knife: Scan memory for secrets and more. Maybe eventually a full /proc toolkit.

sourcecode-ai/aura

Python source code auditing and static analysis on a large scale

shipsecai/studio

Workflow automation for Security Teams

undeadsec/dockerspy

Scans Docker Hub images using regex patterns to extract exposed secrets, private keys, and authentication tokens for security auditing and incident…

kontext-security/kontext-cli

Secure agents in seconds with permissions enforced at runtime.

mcp-shark/mcp-shark

Wireshark-like forensic analysis for Model Context Protocol communications Capture, inspect, and investigate all HTTP requests and responses between…

anshumanbh/kubebot

A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform

stuxctf/mhf

Mobile Helper Framework (mhf) is a tool that automates the process of identifying the framework/technology used to create a mobile application.…

thewhiteh4t/llmreaper

Passive LLM Conversation Capture & Sensitive Data Exposure Research

davidnussio/envsec

Secure CLI tool for managing environment secrets using native OS credential stores (macOS Keychain, Linux Secret Service, Windows Credential Manager)

owasp/wrongsecrets-binaries

Source code for the Binaries of OWASP WrongSecrets

praetorian-inc/gato

GitHub Actions Pipeline Enumeration and Attack Tool