All projects
Repositories in this selection 9 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Ssemgrep / semgrepLightweight static analysis for many languages. Find bug variants with patterns that look like source code.CLGPL-2.1 · Share derivative sourceInsufficient rank history17,4201,143——2026-11-03
2—Aanalysis-tools-dev / static-analysis⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.RustMIT · PermissiveInsufficient rank history14,8651,524——2026-11-01
3—Llintsinghua / DeepAuditDeepAudit: Everyone has an AI hacker team that makes vulnerability mining within reach. One-click deployment and operation by Xiaobai, autonomous collaborative audit + automated sandbox PoC verification. Supports Ollama private deployment and generates reports with one click. Support transfer station. Make security no longer expensive and audit no longer complex.PythonAGPL-3.0 · Share derivative sourceInsufficient rank history7,257877——2026-11-01
4—BBearer / bearerCode security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.GoNOASSERTION · Restricted / unknownInsufficient rank history2,779155——2026-11-02
5—Bbetterleaks / betterleaksFind leaked secrets everywhere.GoMIT · PermissiveInsufficient rank history2,761178——2026-11-03
6—ZZupIT / horusecHorusec is an open source tool that improves identification of vulnerabilities in your project with just one command.GoApache-2.0 · PermissiveInsufficient rank history1,345219——2026-11-02
7—Iinsidersec / insiderStatic Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).GoMIT · PermissiveInsufficient rank history55480——2022-04-10
8—MMustacheCase / zanadirOpen-source CI/CD security tool: finds the security checks your pipeline is missing, and the ones that can never fail the build. GitHub Actions, GitLab CI and more.GoMIT · PermissiveInsufficient rank history18117——2026-11-03
9—ZZigrin-Security / CakeFuzzerCake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.PythonGPL-3.0 · Share derivative sourceInsufficient rank history1059——2025-07-22
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.