All projects
Repositories in this selection 24 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Aanchore / grypeA vulnerability scanner for container images and filesystemsGoApache-2.0 · PermissiveInsufficient rank history13,163930——2026-11-02
2—Ggoogle / oss-fuzzOSS-Fuzz - continuous fuzzing for open source software.ShellApache-2.0 · PermissiveInsufficient rank history12,8382,970——2026-11-02
3—Ffuture-architect / vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devicesGoGPL-3.0 · Share derivative sourceInsufficient rank history12,3251,247——2026-11-01
4—Eedoardottt / awesome-hacker-search-enginesA curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and moreShellMIT · PermissiveInsufficient rank history11,4581,116——2026-11-02
5—Qquay / clairVulnerability Static Analysis for ContainersGoApache-2.0 · PermissiveInsufficient rank history11,0861,214——2026-10-30
6—Ssix2dez / reconftwAuthor description: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilitiesShellMIT · PermissiveInsufficient rank history8,3261,264——2026-11-02
7—Ttrickest / cveGather and update all available and newest CVEs with their PoC.HTMLMIT · PermissiveInsufficient rank history8,179983——2026-10-16
8—Iinfoslack / awesome-web-hackingA list of web application securityUnknownMIT · PermissiveInsufficient rank history7,3391,370——2026-10-29
9—Ppresidentbeef / brakemanA static analysis security vulnerability scanner for Ruby on Rails applicationsRubyNOASSERTION · Restricted / unknownInsufficient rank history7,293779——2026-10-22
10—Ssnyk / cliSnyk CLI scans and monitors your projects for security vulnerabilities.TypeScriptNOASSERTION · Restricted / unknownInsufficient rank history5,694701——2026-11-03
11—Ggoogle / clusterfuzzScalable fuzzing infrastructure.PythonApache-2.0 · PermissiveInsufficient rank history5,628636——2026-10-31
12—Aaquasecurity / kube-hunterHunt for security weaknesses in Kubernetes clustersPythonApache-2.0 · PermissiveInsufficient rank history5,087610——2024-03-19
13—Ccdk-team / CDK📦 Make security testing of K8s, Docker, and Containerd easier.GoApache-2.0 · PermissiveInsufficient rank history4,783610——2026-05-01
14—DDependencyTrack / dependency-trackDependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.JavaApache-2.0 · PermissiveInsufficient rank history4,400853——2026-11-03
15—RRetireJS / retire.jsscanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.JavaScriptApache-2.0 · PermissiveInsufficient rank history4,199441——2026-10-30
16—Aantonio-morales / Fuzzing101An step by step fuzzing tutorial. A GitHub Security Lab initiativeUnknownApache-2.0 · PermissiveInsufficient rank history3,926433——2026-06-16
17—Zzhzyker / vulmapVulmap is a web vulnerability scanning and verification tool that can scan web apps for vulnerabilities and perform vulnerability verification.PythonGPL-3.0 · Share derivative sourceInsufficient rank history3,512571——2023-04-26
18—BBearer / bearerCode security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.GoNOASSERTION · Restricted / unknownInsufficient rank history2,779155——2026-11-02
19—OOWASP / NodeGoatThe OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.HTMLApache-2.0 · PermissiveInsufficient rank history2,0863,110——2024-06-15
20—Llirantal / is-website-vulnerablefinds publicly known security vulnerabilities in a website's frontend JavaScript librariesJavaScriptApache-2.0 · PermissiveInsufficient rank history2,042127——2026-10-27
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.