An auto-updating list of shodan dorks with info on the amount of results they return!

Audit your Node version for known CVEs and patches

Audit your PHP version for known CVEs and patches

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.

Protect your SIP Servers from bad actors at https://sentrypeer.org

Github action to run PyCQA's bandit security linter.

LLM vulnerability scanner

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.

The ZAP core project

ZAP Add-ons

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Nuclei POC，每日更新

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

A modular vulnerability scanner with automatic report generation capabilities.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

⚡️ Docker official image for Wallarm Node. API security platform agent.

boostsecurityio/poutine

cwe_checker finds vulnerable patterns in binary executables