TypeScript
juice-shop/juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Stars: 14,121Forks: 20,096Updated Oct 18, 2026
24pullrequestsapplication-security
Unsorted bookmarks
Saved repositories that have not yet been assigned to a topic.
Bookmarks for reference; inclusion does not indicate testing or a recommendation.
Repositories
Filters need JavaScript. You can browse the repositories and pages below.
Page 2. 326 repositories in this topic.
TypeScript
juice-shop/juice-shop-ctf
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
Stars: 480Forks: 139Updated Sep 30, 2026
24pullrequestsapplication-security
C#
microsoft/mcp-gateway
MCP Gateway is a reverse proxy and management layer for MCP servers, enabling scalable, session-aware stateful routing and lifecycle management of MCP servers in Kubernetes environments.
Stars: 885Forks: 97Updated Oct 17, 2026
aiapi-gateway
HCL
aws-samples/sample-aws-eks-kata-for-agents
No description provided.
Stars: 9Forks: 0Updated Sep 15, 2026
Python
agentic-community/mcp-gateway-registry
Enterprise-ready MCP Gateway & Registry that centralizes AI development tools with secure OAuth authentication, dynamic tool discovery, and unified access for both autonomous AI agents and AI coding assistants. Transform scattered MCP server chaos into governed, auditable tool access with Keycloak/Entra integration.
Stars: 988Forks: 252Updated Oct 17, 2026
a2aagentic-ai
Go
kubernetes-sigs/bom
A utility to generate SPDX-compliant Bill of Materials manifests
Stars: 474Forks: 70Updated Oct 15, 2026
bomgo
Python
tern-tools/tern
Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.
Stars: 1,028Forks: 191Updated Oct 15, 2026
compliancecontainers
Go
google/osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Stars: 11,200Forks: 813Updated Oct 17, 2026
scannersecurity-audit
Go
open-policy-agent/conftest
Write tests against structured configuration data using the Open Policy Agent Rego query language
Stars: 3,284Forks: 363Updated Oct 17, 2026
kubernetesopen-policy-agent
HTML
oasis-tcs/csaf
OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secondary artifacts like meeting minutes and productivity code
Stars: 229Forks: 53Updated Oct 12, 2026
Rust
Helvesec/rmux
Universal Rust multiplexer with a typed SDK — drive any CLI or TUI app from code. Native on Linux, macOS, and Windows.
Stars: 2,666Forks: 167Updated Oct 17, 2026
agentai
Python
grafana/o11y-bench
Open benchmark on observability tasks built on Harbor
Stars: 75Forks: 12Updated Oct 17, 2026
aibenchmark
Python
harbor-framework/harbor
Framework for evaluating and improving agents
Stars: 6,202Forks: 2,021Updated Oct 18, 2026
evalsrl-environments
Go
grafana/gcx
A CLI for managing Grafana and Grafana Cloud resources. Optimized for agentic usage.
Stars: 789Forks: 61Updated Oct 16, 2026
Python
trailofbits/skills
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
Stars: 7,624Forks: 659Updated Oct 18, 2026
agent-skills
Rust
vectordotdev/vector
A high-performance observability data pipeline.
Stars: 22,720Forks: 2,334Updated Oct 18, 2026
agentcloud-native
Python
ray-project/ray
Ray is an AI compute engine. Ray consists of a core distributed runtime and a set of AI Libraries for accelerating ML workloads.
Stars: 44,059Forks: 8,169Updated Oct 18, 2026
data-sciencedeep-learning
Go
google/osv.dev
Open source vulnerability DB and triage service.
Stars: 2,976Forks: 382Updated Oct 17, 2026
securitysecurity-tools
Go
ossf/package-analysis
Open Source Package Analysis
Stars: 921Forks: 75Updated Oct 17, 2026
TypeScript
aws-actions/configure-aws-credentials
Configure AWS credential environment variables for use in other GitHub Actions.
Stars: 3,017Forks: 583Updated Oct 17, 2026
Python
61418/aws-sso-util
Smooth out the rough edges of AWS SSO (temporarily, until AWS makes it better).
Stars: 1,054Forks: 89Updated Oct 15, 2026
awsaws-sso
TypeScript
microsoft/AntiSSRF
No description provided.
Stars: 118Forks: 18Updated Oct 14, 2026
Vue
yeswehack/myopenvdp
MyOpenVDP is a free web application to install a vulnerability disclosure policy or a vulnerability disclosure program on your assets. (VDP)
Stars: 37Forks: 6Updated Sep 2, 2026
mit-licensevdp
Python
DefectDojo/django-DefectDojo
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
Stars: 5,011Forks: 1,971Updated Oct 18, 2026
analyticsappsec
disclose/dioterms
Open-source vulnerability disclosure policy templates.
Stars: 73Forks: 8Updated Oct 11, 2026
boilerplatebug-bounty
Go
grafana/grafana-operator
An operator for Grafana that installs and manages Grafana instances, Dashboards and Datasources through Kubernetes/OpenShift CRs
Stars: 1,390Forks: 472Updated Oct 16, 2026
communitygo
HTML
OWASP/Top10
Official OWASP Top 10 Document Repository
Stars: 6,322Forks: 1,164Updated Oct 17, 2026
Python
aws-samples/siem-on-amazon-opensearch-service
A solution for collecting, correlating and visualizing multiple types of logs to help investigate security incidents.
Stars: 667Forks: 208Updated Sep 21, 2026
awssecurity
Shell
jamf/jamfprotect
A repository for open-source resources created for use with or alongside Jamf Protect.
Stars: 238Forks: 32Updated Oct 4, 2026
analyticsdetections
Go
praetorian-inc/titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
Stars: 727Forks: 85Updated Oct 17, 2026
appsecburp-suite-extension
RustArchived
praetorian-inc/noseyparker
Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.
Stars: 2,337Forks: 132Updated Oct 15, 2026
credentialsdevsecops
Go
aquasecurity/tfsec
Tfsec is now part of Trivy
Stars: 7,052Forks: 560Updated Oct 17, 2026
awsazure
Python
intuitem/ciso-assistant-community
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
Stars: 4,524Forks: 872Updated Oct 18, 2026
auditautomation
Shell
Security-Onion-Solutions/securityonion
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
Stars: 4,932Forks: 680Updated Oct 16, 2026
case-managementcyber-security
Rust
matanolabs/matano
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
Stars: 1,700Forks: 121Updated Oct 15, 2026
alertingapache-iceberg
Python
awslabs/agentcore-samples
Amazon Bedrock Agentcore accelerates AI agents into production with the scale, reliability, and security, critical to real-world deployment.
Stars: 3,457Forks: 1,364Updated Oct 17, 2026
agentagentic-ai