GitHub Open Source Insight
Computed at Sep 11, 2026GitHub repo leaderboard by stars, growth rate and activity.
wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
C++16,818 starslast pushed 23 hours agoCISOfy
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Shell16,308 starslast pushed 2 days agobridgecrewio
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Python8,995 starslast pushed 6 days agoaquasecurity
deepfence
Open Source Cloud Native Application Protection Platform (CNAPP)
TypeScript5,322 starslast pushed 3 months agointuitem
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
Python4,417 starslast pushed Yesterdayinspec
ComplianceAsCode
Security automation content in SCAP, Bash, Ansible, and other formats
Shell2,802 starslast pushed Yesterdaysnapotter-hq
Open-source, self-hosted file-processing tool. Convert, compress, OCR, transcribe & run local AI across image, video, audio, PDF & documents, via UI, REST API & pipelines. Your files never leave your network.
TypeScript2,590 starslast pushed 2 days agolunasec-io
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
TypeScript1,469 starslast pushed 2 years ago
| # | Repo | Language | Stars | 30-day trend | Last updated |
|---|---|---|---|---|---|
| 1 | wazuh Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads. | C++ | 16,818 | last pushed 23 hours ago | |
| 2 | CISOfy Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional. | Shell | 16,308 | last pushed 2 days ago | |
| 3 | bridgecrewio Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew. | Python | 8,995 | last pushed 6 days ago | |
| 4 | aquasecurity Tfsec is now part of Trivy | Go | 7,036 | last pushed 6 months ago | |
| 5 | deepfence Open Source Cloud Native Application Protection Platform (CNAPP) | TypeScript | 5,322 | last pushed 3 months ago | |
| 6 | intuitem CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more. | Python | 4,417 | last pushed Yesterday | |
| 7 | inspec InSpec: Auditing and Testing Framework | Ruby | 3,088 | last pushed 3 days ago | |
| 8 | ComplianceAsCode Security automation content in SCAP, Bash, Ansible, and other formats | Shell | 2,802 | last pushed Yesterday | |
| 9 | snapotter-hq Open-source, self-hosted file-processing tool. Convert, compress, OCR, transcribe & run local AI across image, video, audio, PDF & documents, via UI, REST API & pipelines. Your files never leave your network. | TypeScript | 2,590 | last pushed 2 days ago | |
| 10 | lunasec-io LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/ | TypeScript | 1,469 | last pushed 2 years ago |
All · 11,474