Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

✨ Fully autonomous AI Agents system capable of performing complex penetration testing tasks

🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

Go security checker

Infection Monkey - An open-source adversary emulation platform

Automated Adversary Emulation Platform

Open Source Vulnerability Management Platform

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

👀👮🐢🔥Performs a privacy & security check of Windows 10

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Works with Claude Code, GitHub Copilot, OpenAI Codex CLI, Cursor, Gemini CLI & 20+ platforms · Penetration testing, DFIR, threat intel, cloud security & more · Apache 2.0

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Security automation content in SCAP, Bash, Ansible, and other formats

Automated Security Testing For REST API's

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Automation to assess the state of your M365 tenant against CISA's baselines

🕵️ OSINT Tools for gathering information and actions forensics 🕵️