Havuz

Codex Security, kod depolarındaki güvenlik açıklarını taramak, doğrulamak ve düzeltme önerileri sunmak için CLI ve TypeScript SDK sağlar.

Neden yükseliyor · 76 günlük yaşına karşın yüksek yıldız sayısı ve son 28 gündeki 188 commit ile 20 farklı yazar, belirgin ilgi ve aktif geliştirme gösteriyor; OpenAI markası da görünürlüğüne katkıda bulunabilir. Bu veriler tek başına tarama kalitesini veya üretim ortamında benimsenmeyi kanıtlamaz.

Security testing that runs inside the coding agent you already use. Source-available, not open source.

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

Harden your package manager configs against supply chain attacks.

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed,

A Python CLI tool that scans all repositories owned by a GitHub user/org for accidentally committed secrets (API keys, tokens, passwords, pr

Automated Proof-of-Carrying Change Management for AIOps 2026

Turn declarative exercises into reproducible, runnable and verifiable lab environments

Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.

Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, improved every release.

Audit and fix your Mac's security in one command. No agent, no signup, open source.

Let your AI agent use your passwords and API keys - without ever letting it see them

Audits AUR PKGBUILD updates before you install: detects structural changes, suspicious commands, typosquatting, and novelty signals, then pr

The AI security agent guards your code.

Detect abandoned and end-of-life dependencies that CVE-based scanners don't flag, and rank which ones to remove first.

AI agent skills for the JFrog Platform. Search and download artifacts, query CVEs and exposures, check curation and compliance, trace builds

Automated CLI security auditor for web configuration vulnerabilities.

Git-aware secret & .env leak guard for TypeScript/Node — sub-second pre-commit scanning with the lowest false-positive rate.

NSAuditor AI Community — open-source network security scanner. 27 discovery plugins, structured findings, SARIF/CSV output, MCP integration,

Open-source Supabase security auditor: detects RLS-disabled tables, public buckets, exposed SECURITY DEFINER functions. Active anonymous pro

Passive attack-surface scanner: turn a domain into a risk grade, copy-paste fixes, and a client-ready report. Safe DNS, HTTP, TLS, email, an

Finds what's wrong — and shows you the fix. Code, deps, config & infra — one offline scan, one report.

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

An AI-powered Git pre-commit/pre-push security gate

Catch .env secrets leaking into git: a pre-commit hook and CLI that fails when an API key or any value of your env files is staged, tracked

Safely run untrusted repos (fake-interview malware, infostealers, RATs) in a locked-down, ephemeral container. No host secrets reachable, ne

NEXUS REDFOX — Local-first code intelligence and security analysis platform for developers and security researchers.

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers i

Static secret scanner for source trees — regex rules, entropy scoring, and SARIF output for CI pipelines.