Kubernetes-native policy engine.
HardenAutomateCloudIaC
cyberstars / purpose / devsecops
Tools for devsecops
Shift-left scanning in CI/CD pipelines.
75 tools indexed
Security automation across the compliance data lifecycle.
AutomateHardenCloudEndpoints
Mobile app security testing.
ScanAnalyzeMobile apps
Symbolic-execution for EVM bytecode.
ScanAnalyzeBinariesSource code
Nika
—Cross-file taint-analysis SAST for Java microservices
ScanAnalyzeSource codeWeb apps
Template-based vulnerability scanner.
ScanWeb appsNetworks
Adversary emulation for AI agents, LLM apps and MCP servers
ScanFuzzWeb apps
Continuous fuzzing for open source.
FuzzAutomateSource codeBinaries
Dependency vulnerability scanner.
ScanSource codeCloud
Open-source threat modeling.
AnalyzeHardenSource codeCloud
Open-source web app scanner.
ScanInterceptWeb apps
Policy-as-code across the stack.
HardenAutomateCloudIaC
File-based agent workspace for source-guided whitebox security review
AnalyzeScanSource codeWeb apps
Open-source AI agent firewall for MCP and agent egress.
InterceptMonitorWeb appsNetworks
Multi-cloud security posture.
ScanHardenCloud
QARK
—Quick Android Review Kit.
ScanAnalyzeMobile apps
Detect vulnerable JS libraries.
ScanWeb appsSource code
Self-hosted open-source WAF.
MonitorHardenWeb apps
API fuzzer from OpenAPI/GraphQL.
FuzzScanWeb apps
Lightweight static analysis.
ScanAnalyzeSource code
Solidity / Vyper static analyzer.
ScanAnalyzeSource code
CI/CD red team framework — like Metasploit for pipelines
ExploitAutomateIaCSource code
Open-source SCA + IaC scanner.
ScanAnalyzeSource codeCloud
Solidity inspector.
AnalyzeSource code