Security audit

VPS Audit is a lightweight, dependency-free Bash script for security and performance auditing of Linux servers, specifically targeting Debian/Ubuntu...

AutoCVE is an agent-driven automated platform for CVE discovery through source code auditing, vulnerability verification, and report generation. It...

Secator is a task and workflow automation framework for security assessments that integrates dozens of well-known pentesting and OSINT tools (arjun,...

Shannon is an autonomous AI pentester that performs white-box security testing of web applications and APIs by analyzing source code to identify...

InQL is a Burp Suite extension for advanced GraphQL security testing, providing vulnerability detection, customizable scans, and native Burp...

Wazuh is a free, open-source security platform providing unified XDR and SIEM capabilities for threat prevention, detection, and response across...

SysReptor is a self-hosted or cloud-based penetration testing reporting platform that allows security professionals to design, write, and render...

Bearer is an open-source static application security testing (SAST) tool that scans source code to identify security vulnerabilities and privacy...

OSV-Scanner is a vulnerability scanner written in Go that integrates with the OSV database to identify known vulnerabilities in project dependencies...

Lynis is a security auditing tool for UNIX-based systems (Linux, macOS, BSD) that performs in-depth security scans, tests compliance (ISO27001,...

PwnDoc is a collaborative pentest reporting platform that streamlines the generation of customizable Word documents from security audit findings....

Prowler is an open-source cloud security platform that automates security and compliance auditing across AWS, Azure, and GCP environments. It is...

Faraday is an open-source vulnerability management platform designed to centralize, aggregate, and normalize security scan data from multiple tools...

Dependency-Check is a Software Composition Analysis (SCA) tool that detects publicly disclosed vulnerabilities in application dependencies by mapping...

npq is a command-line tool that audits npm packages before installation by checking against CVE databases, analyzing package metadata (age,...

Dockle is a container image linter that scans Docker images for security vulnerabilities and best-practice violations, including CIS Benchmarks...

Scanners Box is a curated collection of 9,000+ open-source cybersecurity tools organized across 10+ categories, including AI-driven security agents,...

pip-audit is a Python security scanning tool that identifies known vulnerabilities in package environments, requirements files, and dependency trees,...

Vuls is an agent-less vulnerability scanner written in Go that detects security vulnerabilities across Linux, FreeBSD, Windows, macOS, containers,...

eCapture is a specialized eBPF-based tool for capturing SSL/TLS plaintext traffic without certificate infrastructure, supporting Linux and Android...

NFCGate is an Android research toolkit for capturing, analyzing, and modifying NFC traffic, enabling security researchers and protocol engineers to...

Brakeman is a static analysis security scanner specifically designed for Ruby on Rails applications, detecting vulnerabilities in Rails code without...

SSH-MITM is an interactive SSH interception tool designed for authorized security audits and penetration testing. It allows auditors to position...

bundler-audit is a specialized security tool for Ruby projects that performs patch-level vulnerability scanning of gem dependencies in Gemfile.lock...

sn0int is a semi-automatic OSINT framework and package manager designed for IT security professionals, bug bounty hunters, and law enforcement to...

Claude Command Suite is a specialized development toolkit providing 216+ slash commands, 12 Claude Code skills, and 54 AI agents specifically...

graudit is a lightweight static source code auditing tool that uses grep and regex signatures to detect potential security vulnerabilities across...

Find Security Bugs is a SpotBugs plugin that performs static security analysis on Java, Kotlin, Groovy, and Scala codebases, detecting common...