Highlights
Security
eBPF-based Security Observability and Runtime Enforcement
Linux Runtime Security and Forensics using eBPF
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
A vulnerability scanner for container images and filesystems
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Protect and discover secrets using Gitleaks 🔑
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
Infection Monkey - An open-source adversary emulation platform
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous …
Friends don't let friends leak secrets on their terminal window 🙈
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
Evaluate source control (GitHub) security posture
Discover internet-wide misconfigurations while drinking coffee
Find, install and publish Cloud Native packages
CIS Docker Benchmark - InSpec Profile
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
Scaling Network Scanning. Changes prior to 1.0 may cause difficult to avoid backwards incompatibilities. You've been warned.
Use Trivy as a plug-in vulnerability scanner in the Harbor registry
Open Source Cloud Native Application Protection Platform (CNAPP)
GHRC is a tool for managing GitHub Repository Configurations in a declarative way.
Tornjak is a UI and management layer used for brokering human access to one or more SPIRE deployments
A tool for Terraform state visualisation and automated generation of infrastructure documentation