Tools for devsecops

Find leaked credentials at scale.

Google's network vulnerability scanner.

Agent-less Linux vulnerability scanner.

Catch malicious AUR packages before makepkg builds them.

Cloud-native security and compliance from build to runtime.

Pre-commit secret detection.

LLM vulnerability scanner.

Golang security checker.

Google's general-purpose fuzzer.

CIS benchmarks for Kubernetes.

Detect malicious capabilities in code, binaries and containers.

Secure in-memory handling of secrets for Rust

Red-team prompts, agents and RAGs.

AI pentest tool that re-runs every exploit to verify it.

Private X.509 + SSH CA + ACME server.

Terraform static analysis.

Web application attack and audit framework.

Embedded TLS / DTLS library.