Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

security security-audit owasp ci-cd cybersecurity penetration-testing pentesting appsec offensive-security ethical-hacking security-automation sarif security-tools devsecops security-testing api-security red-teaming ai-security pentesting-tools ai-penetration-testing

• Updated Nov 11, 2026
• TypeScript

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

go docker kubernetes golang security containers iac vulnerability infrastructure-as-code vulnerability-detection hacktoberfest vulnerability-scanners security-tools devsecops misconfiguration

• Updated Nov 12, 2026
• Go

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

security osint mcp incident-response cybersecurity penetration-testing infosec threat-hunting malware-analysis ethical-hacking red-team security-automation devsecops threat-intelligence ai-agents nist-csf cloud-security mitre-attack llm claude-code

• Updated Aug 31, 2026
• Python

Find secrets with Gitleaks 🔑

git go cli golang open-source security secret ci-cd cicd hacktoberfest dlp security-tools devsecops data-loss-prevention gitleaks ai-powered nhi llm llm-training llm-inference

• Updated Oct 28, 2026
• Go

Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.

kubernetes open-source security postgres vault pam acme secret-management secrets environment-variables pki agents security-tools devsecops ai-agents secrets-management certificate-management privileged-access-management secret-manager private-ca

• Updated Nov 12, 2026
• TypeScript

Find, verify, and analyze leaked credentials

security credentials secret secret-management verification secrets dynamic-analysis scanning precommit security-tools devsecops trufflehog

• Updated Nov 12, 2026
• Go

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

rest static-analysis apk owasp dynamic-analysis web-security malware-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing cwe devsecops runtime-security mstg masvs mastg

• Updated Nov 11, 2026
• Python

This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.

python aws security security-audit cloud azure iam gcp forensics compliance hardening security-hardening hacktoberfest gdpr multi-cloud security-tools cloudsecurity devsecops cis-benchmark cspm

• Updated Nov 12, 2026
• Python

Database governance built for humans and agents — controlling changes and access across every major database.

mysql security schema-migrations devops mongodb postgresql oracle flyway database-access liquibase cicd sqlserver tidb devsecops data-security sql-client data-governance gitops data-masking database-governance

• Updated Nov 12, 2026
• Go

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

nodejs cli npm security typescript sdk cybersecurity openai application-security codex devsecops vulnerability-scanning code-scanning ai-security codex-security

• Updated Nov 12, 2026
• TypeScript

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

kubernetes security cloud self-hosted vpn mesh vpn-server k8s ipv6-support overlay-network wireguard devsecops zero-trust site-to-site mesh-network wireguard-vpn wg-quick virtual-networking wireguard-ui secure-remote-access

• Updated Nov 12, 2026
• Go

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

letsencrypt docker nginx kubernetes security devops hosting waf reverse-proxy cybersecurity swarm web-security hardening modsecurity dnsbl web-application-firewall devsecops antibot waap security-tuning

• Updated Nov 12, 2026
• Python

🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.

raspberry-pi devops nix iterm2 nixos hyper data-engineering vscode-extension data-scientists kitty xonsh security-automation devsecops claude python-automation cmux wezterm anthropic claude-code

• Updated Nov 9, 2026
• Python

The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵

ai smart-contracts penetration-testing malware-analysis binary-analysis exploitation-framework vulnerability-scanners security-automation devsecops apk-analysis wifi-hacking ai-security pentesting-tools redteam-tools code-analyzer privacy-compliance agent-security-red-teaming agent-security-benchmark agent-security-tools agent-security-audit

• Updated Nov 6, 2026

Blazing-fast remote access

security cloud elixir phoenix networking network vpn rust-lang vpn-server elixir-lang network-security wireguard virtual-network devsecops liveview wireguard-vpn

• Updated Nov 12, 2026
• Elixir

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

kubernetes golang aws security devops cis cloud etl azure sqlite terraform postgresql gcp hacktoberfest devsecops cspm steampipe postgresql-fdw cnapp zero-etl

• Updated Nov 12, 2026
• Go

DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

react typescript ai developer-tools code-review code-quality security-scanner devsecops vulnerability-scanner sast xai code-audit vite bug-detection supabase llm google-gemini

• Updated Nov 1, 2026
• Python

Tfsec is now part of Trivy

go aws security digitalocean devops ci azure terraform scanner linter static-analysis infrastructure-as-code compliance google-cloud-platform hacktoberfest vulnerability-scanners devsecops misconfiguration terraform-security

• Updated Mar 25, 2026
• Go

Ultimate DevSecOps library

docker kubernetes aws security devops automation awesome cloud serverless tool azure containers gcp ci-cd cybersecurity k8s awesome-list devsecops ssdlc

• Updated Aug 12, 2026

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

security devops security-audit collaboration orchestration cybersecurity penetration-testing vulnerability infosec pentesting cve appsec vulnerability-management vulnerability-scanners autonomous-agents security-automation devsecops continuous-scanning llm autonomous-pentest

• Updated Oct 29, 2026
• Python