Vulnerability Management for Open Source

Open-source autonomous penetration testing platform

Continuous vulnerability detection platform for live production environments

Open-source vulnerability detection platform for software supply chain

AI-powered vulnerability discovery and automated patching for open-source code

Python-based network testing platform for config management and compliance

Vulnerability scanner using templates to scan apps, cloud, and networks

Penetration testing distro for IoT device security assessment

AI assistant that transforms OpenVAS scans into prioritized remediation plans

Vulnerability scanning appliance for IT infrastructure attack surface reduction

Pen test management and reporting platform for manual assessments

Open source vulnerability & IaC scanner for containers & cloud native apps

Open-source platform for pentest reporting and security team collaboration

OpenVAS is an open-source vulnerability scanner that provides extensive testing capabilities for identifying security weaknesses in networks and systems.

A tool that uses NLP and ML to identify potential software vulnerabilities from git commit messages

ParamPamPam is an open-source tool that detects and exploits web application vulnerabilities using fuzzing, SQL injection, and XSS techniques.

FuzzDB is an open-source dictionary of attack patterns and predictable resource locations for dynamic application security testing and vulnerability discovery.

Assesses AWS accounts for subdomain hijacking via Route53/CloudFront

A repository providing hourly-updated data dumps of bug bounty platform scopes from major platforms like HackerOne, Bugcrowd, and Intigriti for security researchers.

ssh-audit is a Python-based tool for auditing SSH server and client configurations to identify security weaknesses and ensure compliance with best practices.

MetaHub is an open-source vulnerability management tool that provides impact-contextual analysis of security findings in AWS environments through automated contextualization, ownership identification, and prioritization scoring.

An open-source tool that automates the detection and analysis of DLL hijacking vulnerabilities in Windows applications, providing detailed reports and remediation guidance.

CVE Ape is an open source tool that creates a local CVE database from the National Vulnerability Database for offline vulnerability searching by package name, vendor, or OS components.