All projects
Repositories in this selection 23 · UTC 2026-11-05
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Mmukul975 / Anthropic-Cybersecurity-Skills817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0PythonApache-2.0 · PermissiveInsufficient rank history35,4504,318——2026-08-31
2—Vvxcontrol / pentagiFully autonomous AI Agents system capable of performing complex penetration testing tasksGoMIT · PermissiveInsufficient rank history33,0505,165——2026-10-22
3—Wwazuh / wazuhWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.C++NOASSERTION · Restricted / unknownInsufficient rank history17,5442,580——2026-11-02
4—Ffuture-architect / vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devicesGoGPL-3.0 · Share derivative sourceInsufficient rank history12,3251,247——2026-11-01
5—Xxonsh / xonsh🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.PythonNOASSERTION · Restricted / unknownInsufficient rank history9,683755——2026-11-02
6—WWe5ter / Scanners-BoxThe Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents - A matrix of all-domain open-source network security tools for geeks, enterprises, and AI agentsUnknownNOASSERTION · Restricted / unknownInsufficient rank history9,1692,430——2026-11-02
7—Ssecurego / gosecGo security checkerGoApache-2.0 · PermissiveInsufficient rank history8,996728——2026-11-02
8—Aapache / calderaAutomated Adversary Emulation PlatformPythonApache-2.0 · PermissiveInsufficient rank history7,4871,408——2026-10-12
9—Gguardicore / monkeyInfection Monkey - An open-source adversary emulation platformPythonGPL-3.0 · Share derivative sourceInsufficient rank history7,120823——2025-05-01
10—Iinfobyte / faradayOpen-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.PythonGPL-3.0 · Share derivative sourceInsufficient rank history6,8391,089——2026-10-29
11—DDefectDojo / django-DefectDojoOpen-Source Unified Vulnerability Management, DevSecOps & ASPMPythonBSD-3-Clause · PermissiveInsufficient rank history5,1812,014——2026-11-03
12—Ooritera / CairnCairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin.PythonAGPL-3.0 · Share derivative sourceInsufficient rank history4,777923——2026-09-07
13—DDependencyTrack / dependency-trackDependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.JavaApache-2.0 · PermissiveInsufficient rank history4,400853——2026-11-03
14—Bbuiltbybel / privatezilla👀👮🐢🔥Performs a privacy & security check of Windows 10C#MIT · PermissiveInsufficient rank history3,739172——2023-04-18
15—YYamato-Security / hayabusaHayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.RustAGPL-3.0 · Share derivative sourceInsufficient rank history3,435302——2026-11-01
16—CCyberStrikeus / CyberStrikeOpen-source AI-powered offensive security harness for automated penetration testing.TypeScriptAGPL-3.0 · Share derivative sourceInsufficient rank history3,364579——2026-11-02
17—BBearer / bearerCode security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.GoNOASSERTION · Restricted / unknownInsufficient rank history2,779155——2026-11-02
18—Bbountyyfi / lonkeroLonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.RustNOASSERTION · Restricted / unknownInsufficient rank history1,09994——2026-11-02
19—Gglobocom / huskyCIPerforming security tests inside your CIGoBSD-3-Clause · PermissiveInsufficient rank history598135——2024-05-15
20—00xsauby / yasuoA ruby script that scans for vulnerable & exploitable 3rd-party web applications on a networkRubyGPL-3.0 · Share derivative sourceInsufficient rank history572138——2017-12-09
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.