Tools
kics
Checkmarx/kics
KICS is Checkmarx's open-source scanner for infrastructure-as-code. It uses customizable queries to find security vulnerabilities, compliance issues and misconfigurations in Terraform, Kubernetes, Docker, CloudFormation and many other IaC platforms.
Topics
Related projects
gitleaks31kA fast CLI scanner that finds passwords, API keys, and tokens leaked in git repos, files, and CI pipelines.
zaproxy16.2kZAP (Zed Attack Proxy) is a widely used open-source web application security scanner. It automatically finds vulnerabilities and supports manual penetration testing, offering a desktop GUI, headless automation and Docker deployment for developers and security testers.
dalfox5.4kDalfox is a fast, open-source XSS scanner written in Rust. It automates parameter analysis, reflected, stored and DOM-based XSS detection, WAF fingerprinting and reporting, with a CLI, REST API and MCP server for security testing workflows.
bearer2.8kBearer is a static application security testing (SAST) CLI that scans source code and data flows to find and prioritize security and privacy risks. Developers run it locally or in CI pipelines.
authorizer2.1kAuthorizer is a self-hosted authentication and authorization server with OAuth2/OIDC, social login, MFA, RBAC, multi-tenancy and an admin panel, ready to plug into your own applications.
cve-bin-tool1.8kA command-line scanner that finds known CVEs in binaries and SBOMs by detecting bundled components, generating reports and integrating with CI pipelines.