security-audit

Open-source projects categorized as security-audit
Edit details
Language: + Python + Go + C + Ruby + Java + JavaScript + Shell + Lua + Rust
Topics: Security security-tools Penetration Testing security-automation vulnerability-scanners
Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
Sponsored

Top 23 security-audit Open-Source Projects

  • lynis

    Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

    • Project mention: Who does check linux distros of malware - open source | /r/linux | 2023-12-10

    Linux has (free) tools to improve security and detect/remove malware: Lynis,Chkrootkit,Rkhunter,ClamAV,Vuls,LMD,radare2,Yara,ntopng,maltrail,Snort,Suricata...

  • vuls

    Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo

  • prowler

    Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

    • Project mention: Ask HN: Cloud security auditing for indie-grade projects? | news.ycombinator.com | 2023-12-04

    Which cloud provider?

    https://github.com/prowler-cloud/prowler is easy to get going with, and gives decent results. It's much stronger at AWS than GCP or Azure.

    Steampipe can be a little harder to wrap your head around, but scales really well and has broader support: https://hub.steampipe.io/mods?objectives=security

  • Wazuh

    Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

    • Project mention: Exclude certain CIS (sca) rules from agents | /r/Wazuh | 2023-12-11

    There is currently no feature for excluding specific SCA rules however this feature has been requested here and would be added to the roadmap for future releases.

  • ecapture

    Capture SSL/TLS text content without a CA certificate using eBPF. This tool is compatible with Linux/Android x86_64/aarch64.

  • Scanners-Box

    A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

  • Brakeman

    A static analysis security vulnerability scanner for Ruby on Rails applications

    • Project mention: First commits in a Ruby on Rails app | dev.to | 2024-01-17

    Brakeman - “Brakeman detects security vulnerabilities in Ruby on Rails applications via static analysis”

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo

  • DependencyCheck

    OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

    • Project mention: OWASP dependency check (<9.0.0) could fail to work after Dec 15th, 2023 | /r/programming | 2023-12-05

  • osv-scanner

    Vulnerability scanner written in Go which uses the data provided by https://osv.dev

    • Project mention: An Intro to SBOMs | news.ycombinator.com | 2023-04-25

  • faraday

    Open Source Vulnerability Management Platform (by infobyte)

  • arachni

    Web Application Security Scanner Framework

    • Project mention: Self-Host Vulnerability Scanner | /r/selfhosted | 2023-07-09

  • vulscan

    Advanced vulnerability scanning with Nmap NSE

    • Project mention: Scanning ports and finding network vulnerabilities using nmap | dev.to | 2023-12-01

    Few people know that nmap is not just for reconnaissance work. Among other things, it allows finding vulnerabilities based on scripts prepared by the community and the tool's developers. Examples include nmap-vulners, vulscan or already prepared scripts that are installed along with nmap.

  • cloudsploit

    Cloud Security Posture Management (CSPM)

  • dockle

    Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

  • github-dorks

    Find leaked secrets via github search

    • Project mention: Information Disclosure | dev.to | 2024-04-01

    Now, whenever we talk about source code the first thing that comes into mind is Github, we can also use Github Dorks to search secrets in the code, you will find useful search techniques in its cheatsheet, there is also a GitHub tool for that Github-Dorks.

  • bundler-audit

    Patch-level verification for Bundler

    • Project mention: 4 Essential Security Tools To Level Up Your Rails Security | dev.to | 2023-05-31

    This Ruby gem is quite useful for detecting versions of gems that are known to be vulnerable to security issues. bundler-audit uses an open database of vulnerable gems called ruby-advisory-db and compares it to the versions that show up in your Gemfile.lock.

  • find-sec-bugs

    The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

  • Reconnoitre

    A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

  • pwndoc

    Pentest Report Generator

    • Project mention: sysreptor alternatives - writehat, Serpico, ReportGen, and pwndoc | libhunt.com/r/sysreptor | 2023-05-02

  • owasp-masvs

    The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

    • Project mention: More ways to identify independently security tested apps on Google Play | news.ycombinator.com | 2023-11-03

    https://github.com/OWASP/owasp-masvs :

    > The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

  • sn0int

    Semi-automatic OSINT framework and package manager

  • bearer

    Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

    • Project mention: Show HN: Bearer Code Security Scanner Add Support for Java, PHP, Go, and Python | news.ycombinator.com | 2023-10-26

  • Diamorphine

    LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

security-audit related posts

Index

What are some of the best open-source security-audit projects? This list will help you:

Project Stars
1 lynis 12,507
2 vuls 10,659
3 prowler 9,514
4 Wazuh 9,161
5 ecapture 8,134
6 Scanners-Box 7,967
7 Brakeman 6,906
8 DependencyCheck 5,863
9 osv-scanner 5,825
10 faraday 4,600
11 arachni 3,639
12 vulscan 3,314
13 cloudsploit 3,172
14 dockle 2,651
15 github-dorks 2,647
16 bundler-audit 2,646
17 find-sec-bugs 2,201
18 Reconnoitre 2,065
19 pwndoc 2,026
20 owasp-masvs 1,945
21 sn0int 1,847
22 bearer 1,736
23 Diamorphine 1,654

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com