All projects
Repositories in this selection 27 · UTC 2026-11-05
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Wwazuh / wazuhWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.C++NOASSERTION · Restricted / unknownInsufficient rank history17,5442,580——2026-11-02
2—CCISOfy / lynisLynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.ShellGPL-3.0 · Share derivative sourceInsufficient rank history16,6111,645——2026-09-16
3—Pprowler-cloud / prowlerAuthor description: This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.PythonApache-2.0 · PermissiveInsufficient rank history15,1592,479——2026-11-02
4—Oopen-policy-agent / opaOpen Policy Agent (OPA) is an open source, general-purpose policy engine.GoApache-2.0 · PermissiveInsufficient rank history12,4231,705——2026-11-03
5—Bbridgecrewio / checkovPrevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.PythonApache-2.0 · PermissiveInsufficient rank history9,1271,452——2026-11-02
6—Ccodenotary / immudbimmudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change historyGoNOASSERTION · Restricted / unknownInsufficient rank history9,048382——2026-10-21
7—Kkyverno / kyvernoUnified Policy as CodeGoApache-2.0 · PermissiveInsufficient rank history8,3111,693——2026-11-03
8—Aaquasecurity / tfsecTfsec is now part of TrivyGoMIT · PermissiveInsufficient rank history7,059560——2026-03-25
9—Mmicrosoft / agent-governance-toolkitAI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.PythonMIT · PermissiveInsufficient rank history6,5111,125——2026-11-02
10—Ccloud-custodian / cloud-custodianRules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resourcesPythonApache-2.0 · PermissiveInsufficient rank history6,1021,670——2026-11-02
11—Ddeepfence / ThreatMapperOpen Source Cloud Native Application Protection Platform (CNAPP)TypeScriptApache-2.0 · PermissiveInsufficient rank history5,327631——2026-06-01
12—Oossec / ossec-hidsOSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.CGPL-2.0 · Share derivative sourceInsufficient rank history5,0701,074——2026-11-02
13—HHotCakeX / Harden-Windows-SecurityHarden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨C#MIT · PermissiveInsufficient rank history4,825345——2026-10-30
14—Iintuitem / ciso-assistant-communityCISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.PythonNOASSERTION · Restricted / unknownInsufficient rank history4,570889——2026-11-03
15—Ssnapotter-hq / SnapOtterOpen-source, self-hosted file-processing tool. Convert, compress, OCR, transcribe & run local AI across image, video, audio, PDF & documents, via UI, REST API & pipelines. Your files never leave your network.TypeScriptAGPL-3.0 · Share derivative sourceInsufficient rank history2,929174——2026-11-02
16—BBearer / bearerCode security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.GoNOASSERTION · Restricted / unknownInsufficient rank history2,779155——2026-11-02
17—Nnilsteampassnet / TeamPassSelf-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.PHPGPL-3.0 · Share derivative sourceInsufficient rank history1,875573——2026-11-01
18—Ssecuritybunker / databunkerSecure Vault for Customer PII/PHI/PCI/KYC RecordsGoMIT · PermissiveInsufficient rank history1,494101——2026-10-30
19—Llunasec-io / lunasecLunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/TypeScriptNOASSERTION · Restricted / unknownInsufficient rank history1,473165——2024-05-02
20—Tterraform-compliance / clia lightweight, security focused, BDD test framework against terraform.PythonMIT · PermissiveInsufficient rank history1,463163——2026-10-22
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.