Topic
Open-source startups tagged #security-tools
8 open-source startups in this directory carry the GitHub topic #security-tools. 6 pushed code in the last 30 days, 1 has been quiet for 31–120 days, 1 has not pushed in over 120 days or is archived. Topics are set by each repository’s own maintainers, so this is what those projects chose to call themselves rather than a category we assigned.
Ship status
6 of 8 pushed in the last 30 days.
The list
All 8, most-starred first.
The last column is the most recent push to any branch, by a person or a bot — it is not a claim that anyone is maintaining the project, and a quiet repository may be a finished one.
| Project | What it does | Stars | Ship status | Last push |
|---|---|---|---|---|
 shannonKeygraphHQ/shannonStill shipping | Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production. | 48.8K | Still shipping | |
 infisicalInfisical/infisicalStill shipping | Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents. | 29.7K | Still shipping | |
 pentagivxcontrol/pentagiStill shipping | Fully autonomous AI Agents system capable of performing complex penetration testing tasks | 25.5K | Still shipping | |
 spiderfootsmicallef/spiderfootGone silent | SpiderFoot automates OSINT for threat intelligence and mapping your attack surface. | 23.3K | Gone silent | |
 wazuhwazuh/wazuhStill shipping | Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads. | 17.2K | Still shipping | |
 lynisCISOfy/lynisStill shipping | Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional. | 16.5K | Still shipping | |
 prowlerprowler-cloud/prowlerStill shipping | Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment. | 15K | Still shipping | |
 Sn1per1N3/Sn1perSlowed | Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections. | 11.4K | Slowed |
Related collections
Sideways from here.
The 8 largest other topics in the directory, then the other ways to slice it.