ZeusCloud

Secure your cloud. ZeusCloud is an open source cloud security platform. Discover, prioritize, and remediate your risks in the cloud. Build an asset inventory of your AWS accounts. Discover attack paths based on public exposure, IAM, vulnerabilities, and more. Prioritize findings with graphical...

auditpolCIS

auditpolCIS Pruebas de referencia CIS de la configuración de SIEM de Windows Esta es una aplicación para probar la configuración de las políticas de auditoría de Windows respecto a las configuraciones recomendadas por CIS Benchmark. Algunos puntos: El sistema probado fue Windows Server 2019, y el...

pii-shield

PII-Shield 🛡️ Zero-code log sanitization sidecar for Kubernetes. Prevents data leaks GDPR/SOC2 by redacting PII from logs before they leave the pod. PII-Shield runs in-process — CLI, sidecar, or WASM. There is no hosted API and no server your data is sent to. "Don't let PII poison your AI models."...

zdr

Zero Data Retention ZDR for LLM Providers Last updated: April 2026 A practical guide to keeping your data private when using LLM APIs. Covers zero-retention endpoints, self-hosting, compliance requirements, and data protection patterns for engineers in regulated industries. Table of Contents Whic...

codetotal

CodeTotal CodeTotal analyzes any snippet , file , or repository to detect possible security flaws such as secret in code , open source vulnerability , code security , vulnerability , insecure , and potential with open source licenses...

pybatfish

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...

agent-scanning

Control your AI agents. Track costs. Stay compliant. open-souce What It Does One dashboard to manage your AI team...

WP-GDPR-Compliance-Plugin-Exploit

Exploit of Vulnerability CVE-2018-19207 in WP GDPR Compliance Plugin WordPress This python script creates a user with role admin. Change the varbiables baseurl, username, email for your specific case. A working email is needed, because an email is sent to this adress in order to setup a password...

EuConform

EuConform 🇪🇺 Open-Source Evidence Toolkit For AI Compliance Open evidence format • Local bias evaluation • Schema validation • CycloneDX interoperability Offline-first • Privacy-preserving • Reusable artifacts • WCAG 2.2 AA accessible EuConform defines an open evidence format for AI compliance and...

Aurea

Aurea Specification Golden Standards for IaC Security HTML Mirror: https://roxanneardary.com/aurea-specification/ Specification Overview Aurea is a fully open-source, AI-powered Infrastructure-as-Code security specification designed to provide continuous security analysis throughout the software...

threatbox

Threatbox - Standard Attack Platform ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years. It started as a collection of scripts, lived as a rolling virtual machine, existed as code to build a Linux ISO, and has now been converted to a set of...

wazuh

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

cloudsploit

CloudSploit de Aqua - Escaneos de Seguridad en la Nube Inicio Rápido Genérico root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploi...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...

gapps

Gapps Gapps is an Security compliance platform that makes it easy to track your progress against various security frameworks. ❄️ View the Gapps site 🏠 Interested in contacting me? Please join our discord Table of Contents 1. Getting Started 2. FAQ New Features ❄️ SOC2, NIST CSF, NIST-800-53, CMMC,...

dep-scan

Introduction OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration with ASPM/VM...

cli

CloudGraph es la herramienta gratuita de código abierto universal API de GraphQL y Gestión de Postura de Seguridad en la Nube CSPM para AWS, Azure, GCP y K8s. Con CloudGraph obtienes: Verificaciones de cumplimiento gratuitas y sin esfuerzo p. ej., Azure CIS 1.3.1, GCP CIS 1.2, AWS CIS 1.2, AWS CI...

cloud-custodian

Cloud Custodian c7n Cloud Custodian, also known as c7n, is a rules engine for managing public cloud accounts and resources. It allows users to define policies to enable a well managed cloud infrastructure, that's both secure and cost optimized. It consolidates many of the adhoc scripts...

ServerSecurityAudit

🛡️ Windows Server Security Audit NIS2 Alignment 📋 Overview A modular PowerShell-based engine designed to perform deep security hygiene audits on Windows Server systems. It delivers actionable risk scoring mapped to NIS2 Directive Article 21 , MITRE ATT &CK, and CIS Controls v8 , generating...

superpowers-evals

Superpowers Evals Behavioral eval lab for superpowers. Quorum drives real coding-agent CLIs Claude, Codex, Antigravity, Gemini, Kimi, OpenCode, Pi, and Copilot through a Gauntlet QA agent and grades them against scenario acceptance criteria plus deterministic post-checks. Code, CLI, paths, and...