ASVS
OWASP
3,784stars+6in 24h
Application Security Verification Standard
Security · GitHub
Protect systems, find vulnerabilities, and improve privacy.
Useful GitHub projects
2,781 projects
rizin
rizinorg
4,182stars+6in 24h
UNIX-like reverse engineering framework and command-line toolset.
securityonion
Security-Onion-Solutions
4,988stars+6in 24h
Security Onion is a free and open Fair-code platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
- Security Onion Console (SOC): A unified web interface for analyzing security events and managing your grid.
- Elastic Stack: Powerful search backed by Elasticsearch.
stenoai
stenolabs
1,364stars+6in 24h
StenographAI is the secure privacy-first AI notepad & notetaker for confidential conversations in government & defence sectors. On Windows, Linux & MacOS.
- Privacy-first: local AI processes your recordings, transcripts, and summaries on your device. External AI providers are optional.
- Live speaker labels — Real-time on-screen text as you speak via Parakeet TDT v3 on Apple Silicon (MLX). Granola-style chat-bubble view with [You] vs [Others] attribution live during the recording.
LokalBot
stevyhacker
110stars+6in 24h
Your personal context engine for macOS, with Windows and Linux in alpha: on-device meeting notes, screen recall, dictation, and autocomplete that you and your AI agents can search. Free and open source (GPLv3).
DnsServer
TechnitiumSoftware
10,336stars+6in 24h
Technitium DNS Server
- Works on Windows, Linux, macOS and Raspberry Pi.
- Docker image available on Docker Hub.
unicorn
unicorn-engine
9,565stars+6in 24h
Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)
VeraCrypt
veracrypt
12,113stars+6in 24h
Disk encryption with strong security based on TrueCrypt
Sn1per
1N3
11,541stars+5in 24h
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- Docker-first deployment - same image, every distro
- Bootstrap 5 / Tabler UI - refreshed responsive interface with light + dark mode
aircrack-ng
aircrack-ng
7,909stars+5in 24h
WiFi security auditing tools suite
altcha
altcha-org
2,898stars+5in 24h
GDPR-, WCAG 2.2 AA-, and EAA-compliant, self-hosted CAPTCHA alternative with a proof-of-work (PoW) mechanism.
- Frictionless Experience: Eliminates frustrating visual puzzles by using background Proof-of-Work (PoW) for a seamless user journey.
- Hardware-Resistant Security: Leverages Argon2 and Scrypt memory-bound algorithms to neutralize hardware acceleration (ASICs/GPUs) and sophisticated bot farms.
anytype-ts
anyproto
9,080stars+5in 24h
Official Anytype client for MacOS, Linux, and Windows
- Offline‑first, local storage with optional peer‑to‑peer sync.
- Zero‑knowledge encryption powered by any‑sync.
caldera
apache
7,524stars+5in 24h
Automated Adversary Emulation Platform
Dark-Moon
ASCIT31
1,217stars+5in 24h
Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.
Awesome-OSINT-List
Astrosp
4,658stars+5in 24h
📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.
caido
caido
2,731stars+5in 24h
🚀 Caido releases, wiki and roadmap
Vanadium
GrapheneOS
2,301stars+5in 24h
Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.
ciso-assistant-community
intuitem
4,620stars+5in 24h
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
- Audit and campaigns management
- Automatic mapping
kubescape
kubescape
11,864stars+5in 24h
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- 🔍 Misconfiguration Scanning - Scan clusters, YAML files, and Helm charts against NSA-CISA, MITRE ATT&CK®, and CIS Benchmarks
- 🐳 Image Vulnerability Scanning - Detect CVEs in container images using Grype
LeanType
LeanBitLab
1,180stars+5in 24h
LeanType is an Open-source keyboard, fork of HeliBoard with additional features and customisation
suveren
marsilid
80stars+5in 24h
Аудит сайта и компании для РФ: иностранные сервисы, 152-ФЗ, блокировки РКН, ЕГРЮЛ и санкционные списки
agent-governance-toolkit
microsoft
6,556stars+5in 24h
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
- MCP Security Gateway - Tool poisoning detection, drift monitoring, typosquatting, hidden instruction scanning (Spec)
- Shadow AI Discovery - Find unregistered agents across processes, configs, and repos (Discovery)
vps-audit
nuver-labs
3,286stars+5in 24h
A lightweight, dependency-free Bash script for security and performance audits and infrastructure monitoring on Linux servers.
android-foss
offa
11,683stars+5in 24h
A list of Free and Open Source Software (FOSS) for Android – saving Freedom and Privacy.