
nDPI
Open Source Deep Packet Inspection Software Toolkit

Open Source Deep Packet Inspection Software Toolkit

Android customization suite providing root access (MagiskSU), systemless module installation, boot image unpacking/repacking, and Zygisk runtime code…

Open-source platform to secure and manage endpoints via MDM, patch management, software deployment, and osquery-powered visibility with compliance…

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

Distributed SIP honeypot that detects and shares fraud data on VoIP attacks. Collects bad actor IPs and phone numbers via peer-to-peer network, with…

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Software Supply Chain Security Platform

OSS-Fuzz - continuous fuzzing for open source software.

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Web-based tool for assessing and tracking software security maturity using the OWASP SAMM and DSOMM models, with Docker support and automated mailing.

Open-source vulnerability database aggregating CVE data from multiple sources with a web UI and API. Maps vulnerabilities to specific software…

The source files and tools needed to build the OWASP Cornucopia decks in various languages

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Workload identity platform that attests running services, issues SPIFFE IDs/SVIDs, and enables mTLS and JWT authentication for Kubernetes,…

Squid Web Proxy Cache - Source Code

Kubernetes-native security scanning orchestrator that automates continuous vulnerability detection by integrating multiple open-source scanners into…

Interactive platform linking security standards and guidelines for designing, developing, testing, and procuring secure software. Provides a unified…

Fully transparent SSH, HTTPS, Kubernetes, database and RDP/VNC bastion/PAM that doesn't need additional client-side software