Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
🕵️♂️ All-in-one OSINT tool for analysing any website
Infisical is the open-source platform for secrets, certificates, and privileged access management.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy
Open Source Cloud Native Application Protection Platform (CNAPP)
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
Open-source mobile security testing suite for iOS and Android. Previously Passionfruit
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.
Reversense (Dexcalibur2) is a fully rewriting and rethinking of Dexcalibur. Reversense is a binary intelligence platform that automates the reverse engineering of mobile and embedded applications.
LuaN1aoAgent is a cognitive-driven, fully autonomous AI penetration testing agent powered by dual-graph reasoning. It is developed by the Intelligent Offensive and Defensive Security Team led by Professor Lu Hui, Dean of the Institute of Cyberspace Security at Guangzhou University.
Application secrets and configuration management for developers.
The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.
Open Source Cloud Security
Arcjet JavaScript (JS) / TypeScript SDK. Stop bots and automated attacks from burning your AI budget, leaking data, or misusing tools with Arcjet's AI security building blocks.
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.
Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️