Curated open source, analyzed
Find open source projects worth using
Hand-picked GitHub repositories with a clear analysis of what they do, who they are for and how they compare.
1,744 repositories ·223 topics· updated daily
Featured repository
ScoutSuite: Audit Multi-Cloud Security Posture
ScoutSuite uses cloud-provider APIs to assess security configurations across cloud accounts and highlight risk areas in an HTML report. It suits security teams that need a point-in-time view of their cloud attack surface, with report data available for offline review.
Explore by topic
Jump into the most common areas across analyzed repositories.
Recently added
The newest projects added to the catalog.
ScoutSuite: Audit Multi-Cloud Security Posture
ScoutSuite uses cloud-provider APIs to assess security configurations across cloud accounts and highlight risk areas in an HTML report. It suits security teams that need a point-in-time view of their cloud attack surface, with report data available for offline review.
InactiveHealth 41/100
NodeGoat: Learn OWASP Top 10 Security in Node.js Apps
OWASP NodeGoat is a Node.js web application for learning how OWASP Top 10 risks affect web apps and how to address them. It pairs a deliberately vulnerable app with tutorials for hands-on security practice.
InactiveHealth 39/100
XSStrike: Detect Cross-Site Scripting Vulnerabilities
XSStrike is a Python XSS detection suite that analyzes responses with hand-written parsers and generates context-aware payloads. It supports reflected and DOM XSS scanning, crawling, fuzzing, parameter discovery, and WAF detection.
InactiveHealth 32/100
Coercer: Test Windows RPC Authentication Coercion
Coercer is a Python tool for assessing and triggering Windows server authentication through vulnerable RPC methods. It supports scan, coerce, and fuzz workflows, with results exportable as JSON, SQLite, or XLSX.
QuietHealth 25/100
BloodHound.py: Collect Active Directory Data with Impacket
BloodHound.py is a Python ingestor built on Impacket that collects Active Directory data for BloodHound analysis. It suits security teams and testers who need to map domain relationships, permissions, sessions, and local administrators.
MaintainedHealth 40/100
docker-bench-security: Check Docker Hosts Against the CIS Benchmark
Docker Bench for Security is a Shell script that checks Docker hosts and containers against the CIS Docker Benchmark. It automates production security checks and helps teams identify areas to review and remediate.
QuietHealth 30/100
Leaderboard
Popular this week
The projects people found most through search, social and other sites over the last 7 days. Arrows show the move since last week.
Discover something different
A rotating sample from deeper in the archive.
python-user-agents: Identify Devices from User-Agent Strings
python-user-agents parses browser and HTTP user-agent strings with ua-parser to identify browsers, operating systems, and devices. It adds convenient mobile, tablet, PC, touch-capability, and bot classifications for Python applications.
InactiveHealth 29/100
TensorRT-LLM: Optimize LLM Inference on NVIDIA GPUs
TensorRT-LLM is a Python framework and runtime for efficient LLM and visual-generation inference on NVIDIA GPUs. It suits teams deploying models on NVIDIA hardware that need optimized kernels and configurable single- or distributed-GPU execution.
ActiveHealth 66/100
tremor-npm: Build React Charts and Dashboards
Tremor is a TypeScript React component library for building data charts and dashboard interfaces with Tailwind CSS. It suits teams that want ready-made analytics UI, but its inactive maintenance makes adoption a decision to weigh carefully.
InactiveHealth 26/100
Stay Updated
Get notified about new repositories and updates. Join our community of developers!