Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Audit your Node version for known CVEs and patches

An API and client for managing STIG assessments

Audit your PHP version for known CVEs and patches

My useful files for penetration tests, security assessments, bug bounty and other security related stuff

Codes that could cause Blue Screen of Death on Windows.

one-stop resource for all things offensive security.

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

Set of tools to audit SIP based VoIP Systems

Darkelf, as a custom PyQt5-based browser, incorporates several security features designed to enhance user privacy and protect against various online threats.

Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners + OpenAI GPT with One Report (Code, IaC) - Betterscan Community Edition (CE)

Our documentation

SSL and TLS protocol test suite and fuzzer

Github action to run PyCQA's bandit security linter.

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

⚡️ Docker official image for Wallarm Node. API security platform agent.

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.