#security

juice-shop/juice-shop

TypeScript

100

health

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

projectdiscovery/nuclei-templates

JavaScript

91

health

Community curated list of templates for the nuclei engine to find security vulnerabilities.

OpenSC/OpenSC

C

91

health

Open source smart card tools and middleware. PKCS#11/MiniDriver

OISF/suricata

C

91

health

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

xalgord/xalgorix

Go

90

health

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

projectcalico/calico

Go

90

health

Cloud native networking and network security

M66B/FairEmail

Java

90

health

Fully featured, open source, privacy friendly email app for Android

dradis/dradis-ce

Ruby

90

health

Dradis Framework: Collaboration and reporting for IT Security teams

prowler-cloud/prowler

Python

89

health

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

stamparm/maltrail

Python

89

health

Malicious traffic detection system

hahwul/dalfox

Rust

89

health

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

luckyPipewrench/pipelock

Go

89

health

Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.

trufflesecurity/trufflehog

Go

89

health

Find, verify, and analyze leaked credentials

aquasecurity/tracee

Go

89

health

Linux Runtime Security and Forensics using eBPF

cilium/cilium

Go

89

health

eBPF-based Networking, Security, and Observability

ViRb3/wgcf

Go

89

health

🚤 Cross-platform, unofficial CLI for Cloudflare Warp

GrapheneOS/AttestationServer

Java

89

health

attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

google/sandboxed-api

C++

89

health

Generate sandboxes for C/C++ libraries automatically

markets/invisible_captcha

Ruby

89

health

🍯 Unobtrusive and flexible spam protection for Rails apps

threathunters-io/laurel

Rust

89

health

Transform Linux Audit logs for SIEM usage