fleet
fleetdm/fleetOpen-source platform to secure and manage endpoints via MDM, patch management, software deployment, and osquery-powered visibility with compliance…
cloud-securityconfiguration-auditingdefensive-tools+4
6.9k
fleetdm/fleetOpen-source platform to secure and manage endpoints via MDM, patch management, software deployment, and osquery-powered visibility with compliance…
preflightsh/preflightGo-based CLI tool that scans codebases for launch readiness, detecting missing configuration, security hygiene issues, secret leaks, and integration…
anthropic-experimental/sandbox-runtimeA lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
commixproject/commixAutomated Αll-in-One OS command injection exploitation tool.
rtvkiz/minimalMinimal CVE Hardened container image collection
jakehildreth/locksmithA small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
mindersec/minderSoftware Supply Chain Security Platform
ariesq/gh-safe-repoPython CLI that creates GitHub repos with safe defaults — branch protection, Dependabot, secret scanning, and pre-flight security scanning — applied…
jp1337/easywallWeb interface for the nftables firewall on Linux, written in Go. The apply undoes itself after 120 seconds unless you confirm it — you cannot lock…
microsoft/secureboot_objectsMicrosoft's curated repository of secure boot objects (KeK, Db, Dbx) for firmware and runtime, enabling transparent revocation updates and…
netbox-community/netboxOpen-source IPAM and DCIM platform providing a centralized source of truth for modeling, documenting, and automating network infrastructure with…
ossf/scorecardOpenSSF Scorecard - Security health metrics for Open Source
intuitem/ciso-assistant-communityGRC platform for risk management, compliance, and audit with 200+ frameworks, automatic control mapping, vulnerability management, and incident…
pgbackrest/pgbackrestParallel backup and restore solution for PostgreSQL with encryption, delta restore, and multi-cloud object store support for enterprise disaster…
cr0hn/dockerscanThe Most Comprehensive Docker Security Scanner
owasp/open-sammyWeb-based tool for assessing and tracking software security maturity using the OWASP SAMM and DSOMM models, with Docker support and automated mailing.
cogiceo/gpohoundOffensive GPO dumping and analysis tool that leverages and enriches BloodHound data
lateralblast/lunarA UNIX security auditing tool based on several security frameworks