
security-harness
Multi-agent static application-security review harness for AI coding agents: maps codebases, hunts vulnerability classes, chains and verifies…

Multi-agent static application-security review harness for AI coding agents: maps codebases, hunts vulnerability classes, chains and verifies…

A vulnerability scanner for container images and filesystems

The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers…

0-day malware detection for binaries, source & scripts (that doesn't suck)

Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.

Top-level repository for LFI: Practical, Efficient, and Secure Software-based Sandboxing

Static analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…

Service that builds enrolled open-source repositories in isolated offline VMs and scans them for security vulnerabilities, emailing findings with…

Firmware Analysis and Comparison Tool

Static analysis tool that detects malicious dependencies in CI/CD pipelines using pattern matching and AST analysis, with a traffic-light risk…

AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.

Example AI-agent taskflows and MCP servers for auditing source code, triaging issues, and detecting vulnerabilities across web, Android, and iOS…

FortinetHunter (@YogSoth0) binary cracking application. Part of CTF for FortinetHunter. ELF door: a stripped Nuitka onefile, an XOR-scrambled…

Django application that performs SAST and Malware Analysis for Android APKs

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Fast, configurable secrets scanner for filesystems, git history, containers, and cloud sources, with Expr-based filtering, credential validation, and…

🔎 Static code analysis engine to find security issues in code.