Latest Updates

zizmor

DevSecOps & Pipeline Security

A static analysis tool for GitHub Actions that identifies common security issues in CI/CD setups.

WebVM

Infrastructure Security & Hardening

Virtual Machine for the Web

Vuls

Vulnerability Management

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Velociraptor

Incident Response & Forensics

A powerful tool for endpoint visibility and incident response, leveraging the Velociraptor Query Language (VQL) for customizable data collection.

Trivy

Vulnerability Management

A security scanning solution for cloud and containerized environments.

tfsec

DevSecOps & Pipeline Security

A security scanner for Terraform configurations that identifies potential vulnerabilities through static analysis.

Syft

Supply Chain Security

A CLI tool and Go library for generating Software Bill of Materials (SBOMs) from container images and filesystems.

Snyk CLI

Vulnerability Management

Snyk CLI scans and monitors your projects for security vulnerabilities.

SOPS

Secrets Management

Simple and flexible tool for managing secrets

Sn1per

Penetration Testing Tools

Attack Surface Management Platform

Security Monkey

Archived

Security Monitoring & Logging

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

S3Scanner

Penetration Testing Tools

Scan for misconfigured S3 buckets across S3-compatible APIs!

Rekor

Supply Chain Security

Software Supply Chain Transparency Log

Prowler

Security Assessment & Audit

Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes.

OWASP WrongSecrets CTF Party

Security Training & Simulation

Run Capture the Flags and Security Trainings with OWASP WrongSecrets

Nettacker

Penetration Testing Tools

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Kubescape

Container & Kubernetes Security

A security platform for Kubernetes that identifies and remediates misconfigurations, vulnerabilities, and compliance issues.

kube-bench

Container & Kubernetes Security

A tool to ensure Kubernetes deployments adhere to industry-standard security best practices as outlined in the CIS Kubernetes Benchmark.

Koku

Cost Security & FinOps

An open source solution for cost management of cloud and hybrid cloud environments.

Interactsh

Penetration Testing Tools

An OOB interaction gathering server and client library