Vulnerability management

Project Copacetic (copa) is a CLI tool for patching container image vulnerabilities directly without full image rebuilds, using vulnerability...

OSV.dev is Google's open-source vulnerability database and triage service that aggregates security vulnerabilities across ecosystems and provides an...

A comprehensive, curated collection of cybersecurity resources, scripts, tools, and training materials covering ethical hacking, penetration testing,...

OWASP Nettacker is a Python-based automated penetration testing and vulnerability scanning framework that helps security professionals conduct...

DefectDojo is a comprehensive DevSecOps and vulnerability management platform that orchestrates security testing, deduplication, remediation, and...

Fleet is an open-source device management platform that unifies MDM, patching, software deployment, and security compliance across Linux, macOS,...

A specialized security tool that provides 77,335 Nuclei vulnerability scanning templates automatically updated daily from Wordfence intelligence,...

OpenCVE is a vulnerability intelligence platform that aggregates CVE data from multiple sources (MITRE, NVD, RedHat, etc.) and provides filtering,...

OpenVAS Scanner is a specialized vulnerability assessment engine for the Greenbone Community Edition, designed to execute continuous feeds of...

Faraday is an open-source vulnerability management platform designed to centralize, aggregate, and normalize security scan data from multiple tools...

GUAC aggregates software security metadata (SBOMs, attestations, vulnerability data) into a queryable graph database to enable supply chain...

Vuls is an agent-less vulnerability scanner written in Go that detects security vulnerabilities across Linux, FreeBSD, Windows, macOS, containers,...

CVE MCP Server is a production-grade Model Context Protocol (MCP) server that integrates Claude with 28 security intelligence tools across 24...

This repository provides a curated collection of KQL (Kusto Query Language) queries for threat hunting and detection within Microsoft Defender for...

ThreatMapper is an open-source Cloud Native Application Protection Platform (CNAPP) that detects threats, vulnerabilities, and security...