Top #sec Tools & Software

API-Security

github

OWASP API Security Project

Shuffle

github

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

tag-security

github

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

ipsum

github

Daily feed of bad IPs (with blacklist hit scores)

31-days-of-API-Security-Tips

github

This challenge is Inon Shkedy's 31 days API Security Tips.

cicd-goat

github

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

nothing-private

github

Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml

cloudsplaining

github

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

landrun

github

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

goHackTools

github

Hacker tools on Go (Golang)

InternalAllTheThings

github

Active Directory and Internal Pentest Cheatsheets

oauth2

github

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

MozDef

github

DEPRECATED - MozDef: Mozilla Enterprise Defense Platform

Astra Autonomous Pentest

producthunt

AI agents that find, validate, and fix every vulnerability

deepsec

producthunt

Open-source coding security harness

Whisper Internet Infra AI Context

producthunt

Free MCP for security AI: live BGP, DNS, threat graph

DeepFrame

producthunt

Serious security before public exposure

Suprbox

producthunt

Box for AI agents to secure enterprise data storage

Netfox

producthunt

A native local macOS network monitor

Finderlock

producthunt

Lock Mac files in Finder with Touch ID & AES-256

DotBGE

producthunt

Local-first file encryption for iOS, CLI, and agents

Skill Inspector

producthunt

Audit your AI agent skills to avoid malware

Cerberus

producthunt

Cursor for AI hacking that can't go out of scope

AGG Identify

producthunt

A lightweight, secure streamlined OIDC and OAuth2 provider