Open-source repos for security scanning
13 repos tagged Security scanning, sorted by GitHub stars. Add filters from the other category types to narrow the list.
No kit for this category yet.
Results

aquasecurity/trivy
Scanner that finds vulnerabilities, misconfigurations, secrets and SBOM issues in containers, code, IaC and Kubernetes.
CI/CD, Docker, Kubernetes, Engineering, IT and security, SaaS
38.9k starsApache-2.0Updated 2 Nov 2026
projectdiscovery/nuclei
Template-based vulnerability scanner for web apps, APIs, networks and cloud configurations.
32.5k starsMITUpdated 3 Nov 2026
gitleaks/gitleaks
Tool that detects hardcoded secrets like passwords and API keys in Git repos and files.
Secrets management, GitHub, Engineering, IT and security, Open-source maintainers
30.6k starsMITUpdated 28 Oct 2026
trufflesecurity/trufflehog
Secret scanner that finds and verifies leaked credentials across Git history, filesystems and cloud sources.
28.8k starsAGPL-3.0Updated 2 Nov 2026
projectdiscovery/katana
Fast command-line crawler that maps URLs and endpoints of a site, often used in security recon.
17.8k starsMITUpdated 3 Nov 2026
wazuh/wazuh
Security platform for threat detection, intrusion detection, log analysis and compliance monitoring across hosts.
17.5k starsOtherUpdated 2 Nov 2026
semgrep/semgrep
Fast static analysis tool that finds bugs and security issues in code with simple, readable rules.
17.4k starsLGPL-2.1Updated 2 Nov 2026
zaproxy/zaproxy
Web application security scanner that finds vulnerabilities in running sites through automated and manual testing.
16.1k starsApache-2.0Updated 2 Nov 2026
crowdsecurity/crowdsec
Collaborative intrusion prevention engine that detects malicious behavior in logs and blocks attackers.
15.4k starsMITUpdated 2 Nov 2026
prowler-cloud/prowler
Cloud security tool that audits AWS, Azure, GCP and Kubernetes against best practices and compliance frameworks.
15.2k starsApache-2.0Updated 1 Nov 2026
google/osv-scanner
Scanner that checks project dependencies against the OSV vulnerability database.
GitHub, Engineering, IT and security, Open-source maintainers
11.4k starsApache-2.0Updated 3 Nov 2026
bridgecrewio/checkov
Static analysis tool that scans Terraform, Kubernetes, CloudFormation and other IaC for misconfigurations.
Infrastructure as code, Kubernetes, AWS, Engineering, IT and security
9.1k starsApache-2.0Updated 2 Nov 2026
TracecatHQ/tracecat
Security automation platform for alert triage and incident response, with no-code workflows and AI agents.
3.9k starsAGPL-3.0Updated 3 Nov 2026