
noseyparker
Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PHP, Ruby.

Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys and risky…

Advanced recon engine that finds real secrets, validates them live, and builds exploit paths from client-side intelligence.

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic…

Burp Suite extension for JavaScript static analysis: extracts API endpoints, URLs, secrets, and emails with noise filtering for web security testing.

a recon tool that finds sensitive data inside the screenshots uploaded to prnt.sc

OWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).

The one shot API attacker tool - finds the API url from the given root simulate the automated attacks

A static analysis tool for securing Go code

A tool for secrets management, encryption as a service, and privileged access management

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

Find, verify, and analyze leaked credentials

Fast, open-source static analysis tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories, files, and stdin…

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Checklist of the most important security countermeasures when designing, testing, and releasing your API

Sandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound…