Tools

anchore/grype

A vulnerability scanner for container images and filesystems

hashicorp/vault

A tool for secrets management, encryption as a service, and privileged access management

bridgecrewio/checkov

Static analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…

getsops/sops

Simple and flexible tool for managing secrets

akanthed/secureai-scan

SecureAI-Scan is a CLI tool that scans TypeScript and JavaScript codebases for security issues specific to AI-powered apps — prompt injection, MCP…

infisical/infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

flythenimbus/bramble

Local-first password manager with direct device-to-device sync

zizmorcore/zizmor

Static analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…

prismorsec/prismor

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt…

boringtools/git-alerts

Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files

preflightsh/preflight

Go-based CLI tool that scans codebases for launch readiness, detecting missing configuration, security hygiene issues, secret leaks, and integration…

sayanarijit/cottage

A modern git based age-encrypted secrets manager for teams.

kontext-security/kontext-cli

Secure agents in seconds with permissions enforced at runtime.

bearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

secretlint/secretlint

Pluggable linting tool to prevent committing credential.

dracondev/dracon-utilities

Invisible infrastructure for Dracon developer workspaces: git sync, system guard, and warden encryption utilities.

ishannaik/agent-sweep

Find and redact secrets in AI coding agent histories (Claude Code, and more).

pypa/pip-audit

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them