bestofgithub.devRepositories with the GitHub topic “security”: 212 repositories with 4M stars between them, mostly written in Python, Go and TypeScript. The highest-rated is morluto/rea, #1 on the bestofgithub Elo ladder.
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
git clone https://github.com/openai/codex-security && cd codex-security && docker compose up -dProtect your SSH keys with your Mac's Secure Enclave
git clone https://github.com/maxgoedjen/secretive.gitKubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
git clone https://github.com/kubescape/kubescape.gitStatic analysis for GitHub Actions (and more)
git clone https://github.com/zizmorcore/zizmor.gitOpen Cyber Threat Intelligence Platform
git clone https://github.com/OpenCTI-Platform/opencti.gitTop disclosed reports from HackerOne
git clone https://github.com/reddelexc/hackerone-reports.gitReverse engineer anything with agents, from app behavior down to native binaries.
brew install reaA collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
git clone https://github.com/trimstray/the-book-of-secret-knowledge.gitReverse engineer anything with agents, from app behavior down to native binaries.
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
A collection of various awesome lists for hackers, pentesters and security researchers
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and…
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS…
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Comfortably monitor your network traffic 🕵️♂️
List of Computer Science courses with video lectures.
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
Web server and reverse proxy with automatic HTTPS, HTTP/3 and a refreshingly small config.
Find, verify, and analyze leaked credentials
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple…
Finds vulnerabilities, misconfigurations, secrets and SBOM issues in containers, Kubernetes and code.
Find secrets with Gitleaks 🔑
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific…
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a…
Get Android app updates straight from the source.
UNIX-like reverse engineering framework and command-line toolset
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm…
🕵️♂️ All-in-one OSINT tool for analysing any website
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Weighs the soul of incoming HTTP requests to stop AI crawlers
The official NGINX Open Source repository.
Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu…
The authentication glue you need.
eBPF-based Networking, Security, and Observability
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
Proxmox VE Helper-Scripts (Community Edition)
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and…
🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn…
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of…
Command-line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store…
The ZAP by Checkmarx Core project
Main Sigma Rule Repository
Simple and flexible tool for managing secrets
An evolving how-to guide for securing a Linux server.
SQL powered operating system instrumentation, monitoring, and analytics.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security…
Free and Open Source Reverse Engineering Platform powered by rizin
Manage your dotfiles across multiple diverse machines, securely.
OpenZeppelin Contracts is a library for secure smart contract development.
Damn Vulnerable Web Application (DVWA)
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware…
open-source agentic AI data assistant for the next generation of AI + Data products.
An open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid…
Nmap - the Network Mapper. Github mirror of official SVN repository.
Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and…
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Low code web framework for real world applications, in Python and Javascript
OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and…
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
OpenVPN is an open source VPN daemon
Daemon to ban hosts that cause multiple authentication errors
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and…
SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS…
A vulnerability scanner for container images and filesystems
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web…
A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
🤖 The Modern Port Scanner 🤖
Open Cyber Threat Intelligence Platform
OSS-Fuzz - continuous fuzzing for open source software.
🧱 easy, fast, programmable and local-first microVM runtime and library
Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source…
Kata Containers is an open source project and community working to build a standard implementation of lightweight…
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check…
🐶 A curated list of Web Security materials and resources.
Open device management
The easiest, and most secure way to access and protect all of your infrastructure.
Set up a personal VPN in the cloud
A curated list of Awesome Threat Intelligence resources
Web path scanner
Open-Source Phishing Toolkit
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team…
404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round…
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
BleachBit system cleaner for Windows and Linux
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk…
Protect your SSH keys with your Mac's Secure Enclave
Database governance built for humans and agents — controlling changes and access across every major database.
Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)
Static analysis for GitHub Actions (and more)
The Rogue Access Point Framework
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine…
Checklist of the most important security countermeasures when designing, testing, and releasing your API
Community guide to securing and improving privacy on macOS.
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through…
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
A curated list of tools for incident response
Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages…
Unified Policy as Code
Monero: the secure, private, untraceable cryptocurrency