Tools

owasp/o-saft

O-Saft - OWASP SSL advanced forensic tool

owasp/docksec

AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.

owasp/asst

OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.

lirantal/awesome-nodejs-security

Curated directory of Node.js security tools, static analyzers, vulnerability scanners, and educational resources covering OWASP Top 10, supply chain…

bearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

owasp/cve-lite-cli

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix,…

owasp/glue

Application Security Automation

password123456/certverify

A scanner that files with compromised or untrusted code signing certificates written in python.

owasp/abap-code-scanner

ABAP Code Analyzer

owasp/sedated

SEDATED® Project (Sensitive Enterprise Data Analyzer To Eliminate Disclosure)

owasp/vulnreach

Runtime-aware SCA — proves which CVEs are actually reachable, not just installed.

keygraphhq/shannon

Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…

urbanadventurer/whatweb

Next generation web scanner

momenbasel/vulnhawk

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PHP, Ruby.

az9713/cve-lite-on-pi

Running OWASP cve-lite-cli against the pi monorepo: scan journey and key finding (vitest CVE-2026-47429).

mxm0z/r2s

A web-based vulnerability scanner for CVE-2025-55182, a critical Remote Code Execution (RCE) vulnerability in React Server Components.

marcin-wolak/simplermidiscoverer

Simple JMX RMI scanning tool