The ZAP by Checkmarx Core project

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Tfsec is now part of Trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Vulnerability Static Analysis for Containers

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

sitespeed.io is an open-source tool for comprehensive web performance analysis, enabling you to test, monitor, and optimize your website’s speed using real browsers in various environments.

🚀 PR-Agent: An AI-Powered 🤖 Tool for Automated Pull Request Analysis, Feedback, Suggestions and More! 💻🔍

An enterprise friendly way of detecting and preventing secrets in code.

Find, verify, and analyze leaked credentials

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

Prevents you from committing secrets and credentials into git repositories

Find secrets with Gitleaks 🔑

Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and private keys.

Langflow is a powerful tool for building and deploying AI-powered agents and workflows.

Constrain, log and scan your MCP connections for security vulnerabilities.

Model Context Protocol (MCP) server for Kubernetes and OpenShift

MCP Server for kubernetes management commands

A modern runtime for JavaScript and TypeScript.

Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one

A lightweight Node.js private proxy registry

An open source trusted cloud native registry project that stores, signs, and scans content.

run and gun dynamically configurable minimalistic proxy router, based on pingora from Cloudflare

Snyk CLI scans and monitors your projects for security vulnerabilities.

Generate Kubernetes architecture diagrams from Kubernetes manifest files, kustomization files, Helm charts, helmfiles, and actual cluster state

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

High performance self-hosted photo and video management solution.

Wait4X allows you to wait for a port or a service to enter the requested state.

Native Ubuntu installations for Apple silicon hardware

Sensible database change management