appsec

opentrap

+178

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

shannon

+879

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

django-DefectDojo

+112

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

SafeLine

+176

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

Agentic-Bug-Hunter

+79

AI-powered bug bounty hunting toolkit that works with or without subscription.

CheatSheetSeries

+69

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

zaproxy

+58

The ZAP by Checkmarx Core project

juice-shop

+62

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

dependency-track

+48

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.