Find secrets with Gitleaks 🔑

Find, verify, and analyze leaked credentials

World's most advanced database DevSecOps solution for Developer, Security, DBA and Platform Engineering teams. The GitHub/GitLab for database DevSecOps.

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

Tfsec is now part of Trivy

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

🔓 🔓 Find secrets and passwords in container images and file systems 🔓 🔓

ContainerSSH: Launch containers on demand

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

🧵 CLI tool for directly patching container images!

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

Protect against malicious open source packages 🤖

secureCodeBox (SCB) - continuous secure delivery out of the box

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.

Query, provision and operate Cloud and SaaS resources and APIs using an extensible SQL based framework

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets