TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
- Language
- HCL
- Licence
- Apache-2.0
- Stars
- 1,320
- Last push
- 2025-07-13
- Indexed
- 2026-11-08
aws-securityazure-securitycloud-securitydevsecopsgcp-securitygoatterraform
Source: GitHub repository metadata.
🎓 Because Education should be free. Contributions welcome! 🕵️
- Language
- Not specified
- Licence
- CC0-1.0
- Stars
- 3,785
- Last push
- 2026-10-04
- Indexed
- 2026-11-08
awesomeawesome-listcoursescurriculumcyber-securitycybersecurityeducationeducational-project
Source: GitHub repository metadata.
💚🇺🇸🗽Secure remote browsing anywhere, any way you like it. Since 2018.
- Language
- Shell
- Licence
- Not specified
- Stars
- 3,930
- Last push
- 2026-11-07
- Indexed
- 2026-11-08
browsercdrchromecobrowsingcybersecurityembeddablehidden-servicesmultiplayer
Source: GitHub repository metadata.
Graph-native supply-chain blast-radius scanner: which compromised npm/PyPI packages can actually reach your project, and through which path. Powered by HydraDB.
- Language
- Python
- Licence
- MIT
- Stars
- 0
- Last push
- 2026-08-16
- Indexed
- 2026-11-08
dependency-graphdependency-scanningdevtoolsgithub-appgraph-databasehydradbnpmosv
Source: GitHub repository metadata.
RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
- Language
- C++
- Licence
- Not specified
- Stars
- 336
- Last push
- 2023-09-03
- Indexed
- 2026-11-08
cybersecuritydfirdigitalforensicsforensicsincident-responseincident-response-toolingrdpsecurity
Source: GitHub repository metadata.
🛡️ Self-hosted vulnerability scanner — scan websites, IPs & code against 100k+ CVEs (NVD + CISA KEV), live scan logs, SARIF reports, CLI & scheduled scans. Two dependencies, zero cloud.
- Language
- JavaScript
- Licence
- MIT
- Stars
- 3
- Last push
- 2026-10-19
- Indexed
- 2026-11-08
appseccisa-kevcvecybersecuritydependency-scanningdevsecopsepssnodejs
Source: GitHub repository metadata.
Unified SAST + DAST + SCA security scanner. Python 3.11+, async, CLI-first. 668 tests.
- Language
- Python
- Licence
- MIT
- Stars
- 1
- Last push
- 2026-09-21
- Indexed
- 2026-11-08
appsecasyncioclicvedastdependency-scanningdevsecopsethical-hacking
Source: GitHub repository metadata.
CYFS is the next-generation technology to build real Web3 by upgrading the basic protocol of Web (TCP/IP+DNS+HTTP),is short for CYberFileSystem. https://www.cyfs.com/, cyfs://cyfs/index_en.html.
- Language
- Rust
- Licence
- BSD-2-Clause
- Stars
- 1,441
- Last push
- 2023-06-14
- Indexed
- 2026-11-08
blockchaincryptographynamed-data-networkingnamed-object-networkingndnnonp2pprotocol
Source: GitHub repository metadata.
Defensive security audit toolkit for authorized web and local projects.
- Language
- TypeScript
- Licence
- Not specified
- Stars
- 0
- Last push
- 2026-10-31
- Indexed
- 2026-11-08
auditdefensive-securitydependency-scanningowaspsarifsecrets-scanningsecuritystatic-analysis
Source: GitHub repository metadata.
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
- Language
- Python
- Licence
- AGPL-3.0
- Stars
- 11,233
- Last push
- 2026-11-06
- Indexed
- 2026-11-08
antibotcybersecuritydevopsdevsecopsdnsbldockerhardeninghosting
Source: GitHub repository metadata.
Audit de sécurité de vos dépôts GitHub et de vos domaines : dépendances, secrets, configuration, licences, SSL.
- Language
- TypeScript
- Licence
- Apache-2.0
- Stars
- 0
- Last push
- 2026-11-02
- Indexed
- 2026-11-08
dependency-scanningelectrongithubnextjsscasecret-scanningsecurity
Source: GitHub repository metadata.
SentinelGuard is a full-featured vulnerability scanner for Python projects. It analyzes source code, dependencies, and secrets in a unified desktop interface.
- Language
- Python
- Licence
- MIT
- Stars
- 0
- Last push
- 2025-11-30
- Indexed
- 2026-11-08
application-securitybylickilabscode-analysiscybersecuritydependency-scanningdevsecopsinfosecopen-source-security
Source: GitHub repository metadata.
Database governance built for humans and agents — controlling changes and access across every major database.
- Language
- Go
- Licence
- Not specified
- Stars
- 14,686
- Last push
- 2026-11-07
- Indexed
- 2026-11-08
cicddata-governancedata-maskingdata-securitydatabase-accessdatabase-governancedevopsdevsecops
Source: GitHub repository metadata.
Security-oriented three-axis observability for sandboxed AI agents: model intent, app context, and runtime telemetry into verifiable evidence graphs for risk, forensics, and audit.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 65
- Last push
- 2026-11-06
- Indexed
- 2026-11-08
agent-observabilityagent-securityai-agentsai-securityapplication-securitycausality-graphdigital-forensicsebpf
Source: GitHub repository metadata.
Project Wycheproof tests crypto libraries against known attacks.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 3,140
- Last push
- 2026-10-23
- Indexed
- 2026-11-08
cryptocryptography
Source: GitHub repository metadata.
Agentic DFIR
- Language
- Python
- Licence
- Apache-2.0
- Stars
- 102
- Last push
- 2026-11-07
- Indexed
- 2026-11-08
aiai-agentsclaude-codedfirdigital-forensicsforensicsincident-responsemcp
Source: GitHub repository metadata.
A JavaScript/TypeScript implementation of the complete Secure Hash Standard (SHA) family (SHA-1, SHA-224/256/384/512, SHA3-224/256/384/512, SHAKE128/256, cSHAKE128/256, and KMAC128/256) with HMAC.
- Language
- TypeScript
- Licence
- BSD-3-Clause
- Stars
- 2,269
- Last push
- 2026-08-26
- Indexed
- 2026-11-08
cryptographycshakehashhmacjavascriptkmacshasha-1
Source: GitHub repository metadata.
CalVigil is an open-source security CLI for scanning dependencies, source code, IaC, containers, binaries, licenses, and supply-chain risks with CI-friendly reports.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 4
- Last push
- 2026-07-07
- Indexed
- 2026-11-08
container-securitydependency-scanninggolangiac-scanninglicense-compliancesastsbomsca
Source: GitHub repository metadata.
Security scanner for source code repositories: finds leaked secrets and insecure patterns, scores the result, and reports as JSON, HTML or SARIF for GitHub code scanning.
- Language
- C#
- Licence
- MIT
- Stars
- 5
- Last push
- 2026-11-05
- Indexed
- 2026-11-08
clicode-scanningcsharpdevsecopsdotnetgithub-actionssarifsast
Source: GitHub repository metadata.
A lightweight, zero-cost Python proxy designed to intercept, audit, and sanitize developer prompts before they reach external LLM APIs. Implements real-time tokenomics, FinOps cost controls, and automated PII/secret scanning for secure AI engineering.
- Language
- Python
- Licence
- MIT
- Stars
- 5
- Last push
- 2026-11-03
- Indexed
- 2026-11-08
ai-securityanthropicdevsecopsfastapifinopsgithub-actionsguardrailsllm
Source: GitHub repository metadata.
What this index tells you
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.