Tools for devsecops

Google's general-purpose fuzzer.

Audit Keycloak configuration for security misconfigurations

CIS benchmarks for Kubernetes.

Detect malicious capabilities in code, binaries and containers.

Secure in-memory handling of secrets for Rust

Static security scanner for firmware and IoT images.

Pre-push AI code review with SAST, secret and dependency scanners.

Orchestrate AI agents to find vulnerabilities in code

Red-team prompts, agents and RAGs.

AI pentest tool that re-runs every exploit to verify it.

Lockfile scanner for known-compromised dependencies.

Private X.509 + SSH CA + ACME server.

Terraform static analysis.

Web application attack and audit framework.

Embedded TLS / DTLS library.