GitHub repo leaderboard by stars, growth rate and activity.
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
Open Source Cloud Native Application Protection Platform (CNAPP)
Web Application Security Scanner Framework
Advanced vulnerability scanning with Nmap NSE
| # | Repo | Language | Stars | 30-day trend | Last updated |
|---|---|---|---|---|---|
| 1 | Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more | Go | 37,850 | last pushed 2 days ago | |
| 2 | Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations. | Go | 31,094 | last pushed 23 hours ago | |
| 3 | Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads. | C++ | 16,818 | last pushed 22 hours ago | |
| 4 | Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional. | Shell | 16,308 | last pushed 2 days ago | |
| 5 | Community curated list of templates for the nuclei engine to find security vulnerabilities. | JavaScript | 12,940 | last pushed 22 hours ago | |
| 6 | Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices | Go | 12,252 | last pushed 3 days ago | |
| 7 | Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources. | Go | 11,725 | last pushed Yesterday | |
| 8 | Open Source Cloud Native Application Protection Platform (CNAPP) | TypeScript | 5,322 | last pushed 3 months ago | |
| 9 | Web Application Security Scanner Framework | Ruby | 4,042 | last pushed 5 months ago | |
| 10 | Advanced vulnerability scanning with Nmap NSE | Lua | 3,783 | last pushed 7 months ago |
All · 11,474