Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
🕵️♂️ All-in-one OSINT tool for analysing any website
Infisical is the open-source platform for secrets, certificates, and privileged access management.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy
Open Source Cloud Native Application Protection Platform (CNAPP)
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
Open-source mobile security testing suite for iOS and Android. Previously Passionfruit
The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.
Application secrets and configuration management for developers.
Open Source Cloud Security
Arcjet JavaScript (JS) / TypeScript SDK. Stop bots and automated attacks from burning your AI budget, leaking data, or misusing tools with Arcjet's AI security building blocks.
MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.
GradeJS analyzes production Webpack bundles without having access to the source code of a website. Instantly see vulnerabilities, outdated packages, and more just by entering a web application URL.
EncryptStorage provide a little more security in frontend
JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.