Open-source secrets + cert + PAM platform.
HardenAutomateCloudSource code
cyberstars / target / source-code
Tools for source code
Repositories, dependencies and build artifacts.
69 tools indexed
Symbolic-execution for EVM bytecode.
ScanAnalyzeBinariesSource code
Nika
—Cross-file taint-analysis SAST for Java microservices
ScanAnalyzeSource codeWeb apps
Continuous fuzzing for open source.
FuzzAutomateSource codeBinaries
Dependency vulnerability scanner.
ScanSource codeCloud
Open-source threat modeling.
AnalyzeHardenSource codeCloud
Benchmark prompt-injection attacks on LLMs.
FuzzAnalyzeWeb appsSource code
File-based agent workspace for source-guided whitebox security review
AnalyzeScanSource codeWeb apps
Automated security health scoring for open-source projects.
ScanHardenSource codeIaC
Cryptographic inventory and post-quantum migration planning.
ScanAnalyzeSource code
REA
—Reverse engineer anything with AI agents, from app behavior to native binaries.
AnalyzeBinariesSource code
JavaScript deobfuscator.
AnalyzeSource codeWeb apps
Detect vulnerable JS libraries.
ScanWeb appsSource code
MCP server exposing 50+ reverse-engineering tools to AI.
AnalyzeScanBinariesSource code
Lightweight static analysis.
ScanAnalyzeSource code
Autonomous AI pentester for web apps and APIs
ScanExploitWeb appsSource code
Scan AI agent skills for vulnerabilities and malicious patterns.
ScanAnalyzeSource code
Solidity / Vyper static analyzer.
ScanAnalyzeSource code
CI/CD red team framework — like Metasploit for pipelines
ExploitAutomateIaCSource code
Open-source SCA + IaC scanner.
ScanAnalyzeSource codeCloud
Autonomous AI agents that hack and fix your app's vulnerabilities.
ScanExploitWeb appsSource code
Solidity inspector.
AnalyzeSource code
Syft
—Generate SBOMs from containers and source code.
AnalyzeCloudSource code
Multi-agent offensive-security harness that turns your AI coding agent into a bug hunter.
ExploitReconWeb appsSource code