Latest Updates

zizmor

DevSecOps & Pipeline Security

A static analysis tool for GitHub Actions that identifies common security issues in CI/CD setups.

Velociraptor

Incident Response & Forensics

A powerful tool for endpoint visibility and incident response, leveraging the Velociraptor Query Language (VQL) for customizable data collection.

Trivy

Vulnerability Management

A security scanning solution for cloud and containerized environments.

Timesketch

Incident Response & Forensics

Collaborative forensic timeline analysis

Tracee

Incident Response & Forensics

A runtime security and forensics tool for Linux environments leveraging eBPF technology.

TerraGoat

DevSecOps & Pipeline Security

TerraGoat is a Terraform repository designed to demonstrate common configuration errors in cloud environments.

Teller

Secrets Management

Cloud native secrets management for developers - never leave your command line for secrets.

Syft

Supply Chain Security

A CLI tool and Go library for generating Software Bill of Materials (SBOMs) from container images and filesystems.

Stratus Red Team

Threat Detection & Response

Granular, Actionable Adversary Emulation for the Cloud

Snyk CLI

Vulnerability Management

Snyk CLI scans and monitors your projects for security vulnerabilities.

SOPS

Secrets Management

Simple and flexible tool for managing secrets

Scout Suite

Security Assessment & Audit

Multi-Cloud Security Auditing Tool

S3Scanner

Penetration Testing Tools

Scan for misconfigured S3 buckets across S3-compatible APIs!

Pacu

Penetration Testing Tools

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Nettacker

Penetration Testing Tools

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

ModSecurity

Security Monitoring & Logging

Web application firewall (WAF) engine for Apache, IIS and Nginx.

MicroBurst

Penetration Testing Tools

A toolkit for enumerating and exploiting vulnerabilities in Azure cloud environments.

Kubescape

Container & Kubernetes Security

A security platform for Kubernetes that identifies and remediates misconfigurations, vulnerabilities, and compliance issues.

Kubernetes Goat

Container & Kubernetes Security

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground

KubeArmor

Container & Kubernetes Security

Runtime Security Enforcement System for Kubernetes environments, leveraging Linux Security Modules for workload hardening and policy enforcement.