GitHub repo leaderboard by stars, growth rate and activity.

• aquasecurity

  #1aquasecurity/trivy

  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  Go37,861 starslast pushed 13 hours ago
• promptfoo

  #2promptfoo/promptfoo

  Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

  TypeScript25,009 starslast pushed 35 minutes ago
• CISOfy

  #3CISOfy/lynis

  Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

  Shell16,315 starslast pushed 2 days ago
• future-architect

  #4future-architect/vuls

  Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

  Go12,253 starslast pushed 3 days ago
• We5ter

  #5We5ter/Scanners-Box

  A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

  —9,042 starslast pushed 4 weeks ago
• aquasecurity

  #6aquasecurity/tfsec

  Tfsec is now part of Trivy

  Go7,036 starslast pushed 6 months ago
• infobyte

  #7infobyte/faraday

  Open Source Vulnerability Management Platform

  Python6,731 starslast pushed 6 days ago
• OWASP

  #8OWASP/Nettacker

  Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

  Python5,560 starslast pushed Yesterday
• deepfence

  #9deepfence/ThreatMapper

  Open Source Cloud Native Application Protection Platform (CNAPP)

  TypeScript5,321 starslast pushed 3 months ago
• scipag

  #10scipag/vulscan

  Advanced vulnerability scanning with Nmap NSE

  Lua3,783 starslast pushed 7 months ago

#	Repo	Language	Stars	30-day trend	Last updated
1	aquasecurity aquasecurity/trivy Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more	Go	37,861		last pushed 13 hours ago
2	promptfoo promptfoo/promptfoo Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.	TypeScript	25,009		last pushed 35 minutes ago
3	CISOfy CISOfy/lynis Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.	Shell	16,315		last pushed 2 days ago
4	future-architect future-architect/vuls Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices	Go	12,253		last pushed 3 days ago
5	We5ter We5ter/Scanners-Box A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑	—	9,042		last pushed 4 weeks ago
6	aquasecurity aquasecurity/tfsec Tfsec is now part of Trivy	Go	7,036		last pushed 6 months ago
7	infobyte infobyte/faraday Open Source Vulnerability Management Platform	Python	6,731		last pushed 6 days ago
8	OWASP OWASP/Nettacker Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management	Python	5,560		last pushed Yesterday
9	deepfence deepfence/ThreatMapper Open Source Cloud Native Application Protection Platform (CNAPP)	TypeScript	5,321		last pushed 3 months ago
10	scipag scipag/vulscan Advanced vulnerability scanning with Nmap NSE	Lua	3,783		last pushed 7 months ago

All · 11,658