Local-first runtime security layer for AI agents.
MonitorHardenEndpointsSource code
cyberstars / purpose / devsecops
Tools for devsecops
Shift-left scanning in CI/CD pipelines.
87 tools indexed
Dockerfile linter.
ScanHardenIaCSource code
Open-source secrets + cert + PAM platform.
HardenAutomateCloudSource code
Static analysis for Kubernetes manifests.
ScanHardenIaCCloud
First open-source K8s security platform.
ScanHardenCloudIaC
Kubernetes-native policy engine.
HardenAutomateCloudIaC
Security automation across the compliance data lifecycle.
AutomateHardenCloudEndpoints
Mobile app security testing.
ScanAnalyzeMobile apps
Symbolic-execution for EVM bytecode.
ScanAnalyzeBinariesSource code
Nika
—Cross-file taint-analysis SAST for Java microservices
ScanAnalyzeSource codeWeb apps
Template-based vulnerability scanner.
ScanWeb appsNetworks
Adversary emulation for AI agents, LLM apps and MCP servers
ScanFuzzWeb apps
Continuous fuzzing for open source.
FuzzAutomateSource codeBinaries
Dependency vulnerability scanner.
ScanSource codeCloud
Open-source threat modeling.
AnalyzeHardenSource codeCloud
Open-source web app scanner.
ScanInterceptWeb apps
Policy-as-code across the stack.
HardenAutomateCloudIaC
File-based agent workspace for source-guided whitebox security review
AnalyzeScanSource codeWeb apps
Automated security health scoring for open-source projects.
ScanHardenSource codeIaC
Sandboxed runtime that safely contains autonomous AI agents.
HardenMonitorEndpointsCloud
Cryptographic inventory and post-quantum migration planning.
ScanAnalyzeSource code
Open-source AI agent firewall for MCP and agent egress.
InterceptMonitorWeb appsNetworks
Multi-cloud security posture.
ScanHardenCloud
QARK
—Quick Android Review Kit.
ScanAnalyzeMobile apps