Tools
zaproxy
zaproxy/zaproxy
ZAP (Zed Attack Proxy) is a widely used open-source web application security scanner. It automatically finds vulnerabilities and supports manual penetration testing, offering a desktop GUI, headless automation and Docker deployment for developers and security testers.
Topics
Related projects
vigolium1.1kVigolium is a vulnerability scanner that combines a deterministic native scanning engine with agentic AI for autonomous discovery, exploitation testing, source-code audit, and finding triage.
kics2.7kKICS is Checkmarx's open-source scanner for infrastructure-as-code. It uses customizable queries to find security vulnerabilities, compliance issues and misconfigurations in Terraform, Kubernetes, Docker, CloudFormation and many other IaC platforms.
osquery23.8kA SQL-powered operating system instrumentation framework that exposes processes, network connections, and other host state as queryable tables for security monitoring.
wpscan9.9kA WordPress security scanner that enumerates versions, plugins, themes and users while detecting known vulnerabilities.
falco9.6kFalco is a CNCF cloud-native runtime security tool that monitors kernel and container events against custom rules to detect and alert on threats in real time.
bandit8.4kA security linter from PyCQA that inspects Python code via AST and plugins to find common security issues and produce reports.