Seekrets OSS
A secret scanning tool that examines NPM JS modules and ZIP files for exposed credentials and sensitive information. The tool integrates with nuclei and nuclei-templates to perform scanning operations on codebases. It provides functionality to: - Download and extract NPM packages for analysis - Scan ZIP files for potential secrets - Detect various types of credentials including API keys, database connections, and authentication tokens - Generate detailed reports showing affected files, severity levels, and exposed information The scanner identifies sensitive data patterns in source code, configuration files, and environment variables to help prevent accidental exposure of confidential information in software supply chains.
FEATURES
ALTERNATIVES
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
A free online tool that scans and fixes common security issues in WordPress websites.
A tool for identifying potential security vulnerabilities in dependency configurations by checking for lingering free namespaces for private package names.
A deliberately weak and insecure implementation of GraphQL for testing and practicing GraphQL security
Utility for comparing control flow graph signatures to Android methods with scanning capabilities for malicious applications.
Security design review automation tool that scans design documents and provides security requirements to development teams during the planning phase.
A tool for identifying potential security vulnerabilities in web applications
StepSecurity is a platform that enhances GitHub Actions security by providing network egress control, risk discovery, action replacement, and security best practices orchestration.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
CTIChef.com Detection Feeds
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.