Template-based vulnerability scanner.
ScanWeb appsNetworks
cyberstars / purpose / devsecops
Tools for devsecops
Shift-left scanning in CI/CD pipelines.
66 tools indexed
Adversary emulation for AI agents, LLM apps and MCP servers
ScanFuzzWeb apps
Continuous fuzzing for open source.
FuzzAutomateSource codeBinaries
Dependency vulnerability scanner.
ScanSource codeCloud
Open-source threat modeling.
AnalyzeHardenSource codeCloud
Open-source web app scanner.
ScanInterceptWeb apps
Policy-as-code across the stack.
HardenAutomateCloudIaC
File-based agent workspace for source-guided whitebox security review
AnalyzeScanSource codeWeb apps
Open-source AI agent firewall for MCP and agent egress.
InterceptMonitorWeb appsNetworks
Multi-cloud security posture.
ScanHardenCloud
QARK
—Quick Android Review Kit.
ScanAnalyzeMobile apps
Detect vulnerable JS libraries.
ScanWeb appsSource code
Self-hosted open-source WAF.
MonitorHardenWeb apps
API fuzzer from OpenAPI/GraphQL.
FuzzScanWeb apps
Lightweight static analysis.
ScanAnalyzeSource code
Solidity / Vyper static analyzer.
ScanAnalyzeSource code
Open-source SCA + IaC scanner.
ScanAnalyzeSource codeCloud
Solidity inspector.
AnalyzeSource code
Syft
—Generate SBOMs from containers and source code.
AnalyzeCloudSource code
Cloud-native secrets manager.
HardenAutomateCloudSource code
eBPF-based runtime security.
MonitorHardenCloudEndpoints
Cross-platform data-protection framework.
HardenSource codeEndpoints
Open-source cloud-native protection platform.
ScanMonitorCloudIaC
Container and IaC vulnerability scanner.
ScanCloudIaC