Detect vulnerable JS libraries.
ScanWeb appsSource code
cyberstars / purpose / devsecops
Tools for devsecops
Shift-left scanning in CI/CD pipelines.
87 tools indexed
Self-hosted open-source WAF.
MonitorHardenWeb apps
API fuzzer from OpenAPI/GraphQL.
FuzzScanWeb apps
Lightweight static analysis.
ScanAnalyzeSource code
Scan AI agent skills for vulnerabilities and malicious patterns.
ScanAnalyzeSource code
Solidity / Vyper static analyzer.
ScanAnalyzeSource code
CI/CD red team framework — like Metasploit for pipelines
ExploitAutomateIaCSource code
Open-source SCA + IaC scanner.
ScanAnalyzeSource codeCloud
Solidity inspector.
AnalyzeSource code
Syft
—Generate SBOMs from containers and source code.
AnalyzeCloudSource code
Cloud-native secrets manager.
HardenAutomateCloudSource code
eBPF-based runtime security.
MonitorHardenCloudEndpoints
Cross-platform data-protection framework.
HardenSource codeEndpoints
Open-source cloud-native protection platform.
ScanMonitorCloudIaC
Container and IaC vulnerability scanner.
ScanCloudIaC
Find leaked credentials at scale.
ScanSource codeCloud
Google's network vulnerability scanner.
ScanNetworksWeb apps
Agentic AI that hunts exploitable vulnerabilities in source code.
ScanAnalyzeSource code
Vuls
—Agent-less Linux vulnerability scanner.
ScanEndpointsCloud
Catch malicious AUR packages before makepkg builds them.
ScanAnalyzeSource code
Cloud-native security and compliance from build to runtime.
ScanHardenCloudIaC
Pre-commit secret detection.
ScanSource code
LLM vulnerability scanner.
ScanFuzzWeb appsSource code
Golang security checker.
ScanAnalyzeSource code