Top #ci Tools & Software

gatling

github

Modern Load Testing as Code

woodpecker

github

Woodpecker is a simple, yet powerful CI/CD engine with great extensibility.

DevSecOps

github

Ultimate DevSecOps library

spicedb

github

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

st2

github

StackStorm (aka "IFTTT for Ops") is event-driven automation for auto-remediation, incident responses, troubleshooting, deployments, and more for DevOps and SREs. Includes rules engine, workflow, 160 integration packs with 6000+ actions (see https://exchange.stackstorm.org) and ChatOps. Installer at https://docs.stackstorm.com/install/index.html

Security-101

github

8 Lessons, Kick-start Your Cybersecurity Learning.

awesome-security-hardening

github

A collection of awesome security hardening guides, tools and other resources

permify

github

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

dalfox

github

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

pouch

github

An Efficient Enterprise-class Container Engine

ciso-assistant-community

github

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, Privacy, and Reporting. It supports 130+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

cloudsploit

github

Cloud Security Posture Management (CSPM)

kube-score

github

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.

pingcastle

github

PingCastle - Get Active Directory Security at 80% in 20% of the time

wolfssl

github

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.

tach

github

A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust

windows_hardening

github

HardeningKitty and Windows Hardening Settings

ScubaGear

github

Automation to assess the state of your M365 tenant against CISA's baselines

megalinter

github

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

cicd-goat

github

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.