security-automation

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

Protect your secrets using Gitleaks-Action

Vulnerability Scan with Nuclei

Vulnogram is the tool for reserving, managing, and publishing CVEs. Get started at vulnogram.org or deploy Docker edition for full enterprise features.

Building Operational Visibility Into (n) Environments

GitHub action to scan container images with Palo Alto Networks' Prisma Cloud

CVE hunting harness for Claude Code - 20 skills, 5-agent team, systematic vulnerability research with false positive elimination

Server Scanner detect rootkit and backdoor

Frontend to display data from huskyCI analyses

Part of the deprecated secureCodeBox v1, see secureCodeBox/secureCodeBox Repo for v2

🔐Generate and manage keys quickly, conveniently and securely in the .env file of your strapi app🚀

Integrate static security testing with HCL AppScan on Cloud using GitHub Actions

paradrop cybersecurity asset management tool

🛡️ 10 production-shaped SOC automation playbooks for n8n LLM-assisted alert triage, phishing analysis, IOC enrichment, human-approved containment, CVE watch & SOC reporting. Import-ready JSON, zero secrets.

AI-Powered Code Security Analyzer. Pluto is a powerful CLI tool that uses AI to detect security vulnerabilities in your code.

(WIP) An AWS Lambda Function to run the SAF CLI as a function in your AWS VPC

Universal security-audit plugin and CLI engine for AI agents with OWASP-mapped reports for Codex, Claude Code, Gemini CLI, OpenCode, Hermes, OpenClaw and Antigravity.

🛡️🤖 A curated atlas of AI agents that secure the software lifecycle — from threat modeling to SOC response

A complete DevSecOps CI/CD automation pipeline for a Node.js application using GitHub Actions, Docker, Trivy security scanning, and Kubernetes (Minikube), implementing shift-left security and cloud-native deployment practices.