- security-audit-skill by cloudflare, 73k stars. Agent skill for multi-phase security audits with machine-readable findings
- sniffnet by GyulyVGC, 43k stars. Desktop app that shows live network traffic and the connections behind it
- trivy by aquasecurity, 39k stars. Scanner for vulnerabilities, misconfigurations and secrets in containers and code
- Anthropic-Cybersecurity-Skills by mukul975, 36k stars. 817 cybersecurity skills for agents, mapped to MITRE ATT&CK and NIST
- openssl by openssl, 31k stars. TLS and general purpose cryptography library written in C
- gitleaks by gitleaks, 31k stars. Scanner that finds hardcoded secrets in git repos and files
- trufflehog by trufflesecurity, 29k stars. Scanner that finds leaked credentials and verifies whether they are live
- SkillSpector by NVIDIA, 26k stars. Checks agent skills and MCP servers for injection and data exfiltration
- cilium by cilium, 26k stars. eBPF networking, security and observability for Kubernetes clusters
- anubis by TecharoHQ, 24k stars. Reverse proxy that challenges automated crawler traffic with a proof of work
- fail2ban by fail2ban, 19k stars. Daemon that bans IPs after repeated failed authentication attempts
- DOMPurify by cure53, 18k stars. DOM-only HTML, MathML and SVG sanitizer that guards against XSS
- mvt by mvt-project, 16k stars. Forensics toolkit that scans Android and iOS devices for signs of compromise
- codex-security by openai, 14k stars. CLI and TypeScript SDK that finds, validates, and fixes security bugs with AI
- Shadowbroker by BigBodyCobain, 12k stars. Python OSINT dashboard tracking flights, satellites, and seismic events in one view
- checkov by bridgecrewio, 9.2k stars. Static analysis scanner for Terraform and other infrastructure as code
- deepsec by vercel-labs, 8.4k stars. Harness that uses coding agents to hunt vulnerabilities in a codebase
- skills by trailofbits, 8.2k stars. Agent skills for security research, vulnerability detection and audits
- defending-code-reference-harness by anthropics, 7.8k stars. Skills and autonomous harness for threat modeling and code scanning
- AiSOC by beenuar, 7.7k stars. Self-hosted AI security operations center with alert triage and agent logs
- fleet by fleetdm, 7.2k stars. Device management and vulnerability reporting built on osquery
- sandbox-runtime by anthropics, 7.1k stars. OS-level sandbox that restricts filesystem and network access for any process
- DevSecOps by sottlmarek, 7.0k stars. Collection of DevSecOps tools and references covering security and AWS
- faraday by infobyte, 6.9k stars. Vulnerability management platform with AI-assisted pentesting tools
- agent-governance-toolkit by microsoft, 6.6k stars. Policy enforcement, identity and sandboxing for autonomous AI agents
- destructive_command_guard by Dicklesworthstone, 6.4k stars. Hook that blocks destructive shell and git commands before agents run them
- psalm by vimeo, 5.9k stars. PHP static analysis tool for finding errors and security issues
- tracee by aquasecurity, 4.7k stars. eBPF based runtime security and forensics tool for Linux
- mxc by microsoft, 3.1k stars. Policy-driven layered isolation and containment for running workloads
- osv.dev by google, 3.1k stars. Open source vulnerability database and triage service
- beelzebub by beelzebub-labs, 2.2k stars. Deception runtime framework for honeypots with AI-driven system virtualization
- MacSai by iliyami, 2.2k stars. Open source Mac cleaner with disk cleanup, optimizer and malware scanning
- anti-mage by N4darae, 2.1k stars. Go tool that spots anti-detect browsers and spoofed profiles at runtime
- cc-safety-net by kenryu42, 2.0k stars. Plugin that blocks destructive commands and secret file access by coding agents
- aif by hardenrun, 2.0k stars. On-device firewall that controls what coding and personal agents can do
- cve-mcp-server by mukul975, 1.8k stars. MCP server exposing CVE, EPSS, KEV and ATT&CK lookups to Claude
- cargo-geiger by geiger-rs, 1.7k stars. Finds unsafe Rust code in a crate and its dependency tree
- pip-audit by pypa, 1.4k stars. Checks Python environments and requirements for known vulnerabilities and fixes them
- kingfisher by mongodb, 1.3k stars. Finds secrets, checks whether they are live, and maps what they can reach
- clawpatrol by denoland, 1.1k stars. Firewall that filters and blocks risky actions taken by AI agents
New repos every two days, stars refreshed daily. Visits are counted without cookies, and the numbers are public. How it works Data RSS Newsletter