All Repos HereSaved favourites (0)

Open-source repos for security scanning

13 repos tagged Security scanning, sorted by GitHub stars. Add filters from the other category types to narrow the list.

13repos tagged Security scanning

No kit for this category yet.

Results

13 repos
Sort
Data from GitHub, checked
  1. aquasecurity/trivy

    Scanner that finds vulnerabilities, misconfigurations, secrets and SBOM issues in containers, code, IaC and Kubernetes.

    CI/CD, Docker, Kubernetes, Engineering, IT and security, SaaS

    38.9k starsApache-2.0Updated 2 Nov 2026
  2. projectdiscovery/nuclei

    Template-based vulnerability scanner for web apps, APIs, networks and cloud configurations.

    Web, IT and security

    32.5k starsMITUpdated 3 Nov 2026
  3. gitleaks/gitleaks

    Tool that detects hardcoded secrets like passwords and API keys in Git repos and files.

    Secrets management, GitHub, Engineering, IT and security, Open-source maintainers

    30.6k starsMITUpdated 28 Oct 2026
  4. trufflesecurity/trufflehog

    Secret scanner that finds and verifies leaked credentials across Git history, filesystems and cloud sources.

    GitHub, Engineering, IT and security

    28.8k starsAGPL-3.0Updated 2 Nov 2026
  5. projectdiscovery/katana

    Fast command-line crawler that maps URLs and endpoints of a site, often used in security recon.

    Web scraping, Web, IT and security, Engineering

    17.8k starsMITUpdated 3 Nov 2026
  6. wazuh/wazuh

    Security platform for threat detection, intrusion detection, log analysis and compliance monitoring across hosts.

    Monitoring, IT and security, Legal and compliance

    17.5k starsOtherUpdated 2 Nov 2026
  7. semgrep/semgrep

    Fast static analysis tool that finds bugs and security issues in code with simple, readable rules.

    CI/CD, GitHub, Engineering, IT and security, SaaS

    17.4k starsLGPL-2.1Updated 2 Nov 2026
  8. zaproxy/zaproxy

    Web application security scanner that finds vulnerabilities in running sites through automated and manual testing.

    Web, IT and security

    16.1k starsApache-2.0Updated 2 Nov 2026
  9. crowdsecurity/crowdsec

    Collaborative intrusion prevention engine that detects malicious behavior in logs and blocks attackers.

    Docker, Operations, IT and security, Self hosters

    15.4k starsMITUpdated 2 Nov 2026
  10. prowler-cloud/prowler

    Cloud security tool that audits AWS, Azure, GCP and Kubernetes against best practices and compliance frameworks.

    AWS, Kubernetes, IT and security, Legal and compliance

    15.2k starsApache-2.0Updated 1 Nov 2026
  11. google/osv-scanner

    Scanner that checks project dependencies against the OSV vulnerability database.

    GitHub, Engineering, IT and security, Open-source maintainers

    11.4k starsApache-2.0Updated 3 Nov 2026
  12. bridgecrewio/checkov

    Static analysis tool that scans Terraform, Kubernetes, CloudFormation and other IaC for misconfigurations.

    Infrastructure as code, Kubernetes, AWS, Engineering, IT and security

    9.1k starsApache-2.0Updated 2 Nov 2026
  13. TracecatHQ/tracecat

    Security automation platform for alert triage and incident response, with no-code workflows and AI agents.

    Workflow automation, Docker, IT and security, SaaS

    3.9k starsAGPL-3.0Updated 3 Nov 2026