vulnerability-scanner

opentrap

+178

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

nuclei

+170

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Agentic-Bug-Hunter

+79

AI-powered bug bounty hunting toolkit that works with or without subscription.

osv-scanner

+60

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

open-kritt

+53

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

xalgorix

+47

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

artifact-keeper

+35

Open-source universal artifact registry. Drop-in Artifactory/Nexus alternative with 40+ package formats, security scanning, WASM plugins, and edge replication.

Cybermes

+29

Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.

0sec-labs/0

+18

Open-source AI security harness. Includes a web UI for code analysis, pentesting, vulnerability research, reverse engineering, verification, and fixing + CLI and MCP for agents.