All projects
Repositories in this selection 21 · UTC 2026-11-05
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Ppromptfoo / promptfooTest your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.TypeScriptMIT · PermissiveInsufficient rank history26,7482,633——2026-11-02
2—CCISOfy / lynisLynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.ShellGPL-3.0 · Share derivative sourceInsufficient rank history16,6111,645——2026-09-16
3—Ffuture-architect / vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devicesGoGPL-3.0 · Share derivative sourceInsufficient rank history12,3251,247——2026-11-01
4—WWe5ter / Scanners-BoxThe Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents - A matrix of all-domain open-source network security tools for geeks, enterprises, and AI agentsUnknownNOASSERTION · Restricted / unknownInsufficient rank history9,1692,430——2026-11-02
5—Aaquasecurity / tfsecTfsec is now part of TrivyGoMIT · PermissiveInsufficient rank history7,059560——2026-03-25
6—Iinfobyte / faradayOpen-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.PythonGPL-3.0 · Share derivative sourceInsufficient rank history6,8391,089——2026-10-29
7—GGhostTroops / scan4allOfficial repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...GoBSD-3-Clause · PermissiveInsufficient rank history6,190718——2024-07-12
8—OOWASP / NettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability ManagementPythonApache-2.0 · PermissiveInsufficient rank history5,7021,228——2026-10-30
9—Ddeepfence / ThreatMapperOpen Source Cloud Native Application Protection Platform (CNAPP)TypeScriptApache-2.0 · PermissiveInsufficient rank history5,327631——2026-06-01
10—Ggreenbone / openvas-scannerThis repository contains the scanner component for Greenbone Community Edition.RustGPL-2.0 · Share derivative sourceInsufficient rank history4,915805——2026-11-03
11—Ccharles2gan / GDA-android-reversing-ToolAuthor description: the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.PythonApache-2.0 · PermissiveInsufficient rank history4,874574——2026-04-10
12—Mmitchellkrogza / nginx-ultimate-bad-bot-blockerNginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat OffendersShellNOASSERTION · Restricted / unknownInsufficient rank history4,834525——2026-11-02
13—Sscipag / vulscanAdvanced vulnerability scanning with Nmap NSELuaNOASSERTION · Restricted / unknownInsufficient rank history3,793686——2026-02-06
14—Ee-m-b-a / embaEMBA - The firmware security analyzerShellGPL-3.0 · Share derivative sourceInsufficient rank history3,746344——2026-11-03
15—Yysrc / xunfengXunfeng is a vulnerability rapid response and巡航 scanning system suitable for enterprise internal networks.PythonGPL-3.0 · Share derivative sourceInsufficient rank history3,5901,304——2024-04-16
16—Ddeepfence / SecretScanner:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:GoMIT · PermissiveInsufficient rank history3,398344——2026-03-07
17—CCheckmarx / kicsFind security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.Open Policy AgentApache-2.0 · PermissiveInsufficient rank history2,730385——2026-11-02
18—Bbountyyfi / lonkeroLonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.RustNOASSERTION · Restricted / unknownInsufficient rank history1,09994——2026-11-02
19—Oolacabs / jackhammerJackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.JavaNOASSERTION · Restricted / unknownInsufficient rank history738161——2024-03-18
20—Ttijme / angularjs-csti-scannerAutomated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.PythonMIT · PermissiveInsufficient rank history32694——2021-10-20
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.