Havuz
Takip ettiğimiz konularda yükselen açık kaynak projeler — yıldız ivmesi, gerçek geliştirme aktivitesi ve AI değerlendirmesiyle.
Yalnız hareketli, son 28 günde commit almamış repoları gizler (yıldızı olan ama bırakılmış projeler). Commit sayısı henüz ölçülmemiş repolar da gizlenir.
EtiketTüm GitHub etiketleri — repo sahiplerinin koyduğu topic'lergöster
Etiketler yükleniyor…
- 1
Local, evidence-based application security assessment engine and Claude Code plugin
11/gün ort. +11 son gün 253 commit 2 yazar Go 27 Eki 2026 güncellendi 3 gün önce - 2
Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own mo
2,6/gün ort. +2 son gün 24 commit 2 yazar TypeScript 13 May 2026 güncellendi 6 gün önce - 3
CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架
2,1/gün ort. +1 son gün 2 commit 1 yazar 02 Eki 2026 güncellendi 3 gün önce - 4
Security testing that runs inside the coding agent you already use. Source-available, not open source.
1,7/gün ort. +0 son gün 1 commit 1 yazar TypeScript 19 Ağu 2026 güncellendi 20 gün önce - 5
DianXing - AI-Driven End-to-End Code Security Auditing
6,3/gün ort. +0 son gün 0 commit 0 yazar 18 Haz 2026 güncellendi 24 Haz 2026 - 6
Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS,
0,8/gün ort. +0 son gün — commit Python 12 May 2026 güncellendi 26 gün önce - 7
AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PH
0,4/gün ort. +0 son gün — commit Python 08 Nis 2026 güncellendi 11 Haz 2026 - 8
Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations
0,3/gün ort. +0 son gün — commit Python 13 Nis 2026 güncellendi 10 gün önce - 9
LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.
0,5/gün ort. +0 son gün — commit Python 17 Haz 2026 güncellendi dün - 10
Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.
0,4/gün ort. +0 son gün — commit TypeScript 01 Tem 2026 güncellendi 2 gün önce - 11
The AI security agent guards your code.
0,2/gün ort. +0 son gün — commit TypeScript 14 Nis 2026 güncellendi 23 May 2026 - 12
Runtime visibility for Python MCP servers. Captures tool calls, session lifecycle, module imports (SHA-256), and subprocess execution as str
0,2/gün ort. +0 son gün — commit Python 31 Mar 2026 güncellendi 5 gün önce - 13
TriLane: autonomous AI pentester and multi-agent security auditor for authorized gray-box testing of web apps and APIs. Built with Rust and
0,2/gün ort. +0 son gün — commit Rust 14 Haz 2026 güncellendi 21 gün önce - 14
Soup Wall: open-source security for AI agents and model traffic. Local Agent, Gateway, self-hosted Console. Apache-2.0.
0,5/gün ort. +0 son gün — commit Python 06 Eyl 2026 güncellendi dün - 15
Agent-assisted vulnerability research across Rust, Android APKs, and AI agents: independent discovery, skeptical triage, verification, and p
0,2/gün ort. +0 son gün — commit Python 15 Tem 2026 güncellendi 20 gün önce - 16
Static security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, S
0,1/gün ort. +0 son gün — commit Go 14 May 2026 güncellendi dün - 17
Open-source CPG-based interprocedural taint analysis + LLM triage, with a Ghidra-style audit workbench. Runs fully offline.
0,4/gün ort. +0 son gün — commit Python 01 Eyl 2026 güncellendi 19 Eyl 2026 - 18
Thick client penetration testing and MSIX security audit toolkit for Windows. Audits .NET, Electron and native binaries: static and runtime
0,2/gün ort. +0 son gün — commit PowerShell 31 May 2026 güncellendi 6 gün önce - 19
Go static taint-analysis engine that finds vulnerabilities in WordPress plugins — WordPress-aware (capability tiers, nonce≠authz, REST/AJAX
0,1/gün ort. +0 son gün — commit Go 06 Haz 2026 güncellendi 06 Haz 2026 - 20
Finds what's wrong — and shows you the fix. Code, deps, config & infra — one offline scan, one report.
0,1/gün ort. +0 son gün — commit Go 25 Haz 2026 güncellendi 3 gün önce - 21
A BOLA/IDOR access-control confirmation engine — code adjudicates every verdict, not just the model, with a reproducible evidence chain.
0,2/gün ort. +0 son gün — commit Python 11 Ağu 2026 güncellendi 14 Eyl 2026 - 22
Fast, self-contained vulnerability scanner (single Go binary) for web apps, APKs and binaries - extensible with JSON and nuclei YAML templat
3/gün ort. +0 son gün — commit Go 28 Eki 2026 güncellendi 3 gün önce - 23
AI-powered vulnerability triage platform for Python projects. KIRTA combines SBOM, SCA, static code analysis, call maps, and AI explanations
0/gün ort. +0 son gün — commit TypeScript 09 May 2026 güncellendi 09 Eyl 2026