Topic
Open-source startups tagged #security-tools
8 open-source startups in this directory carry the GitHub topic #security-tools. 6 pushed code within 30 days of the snapshot of 2026-09-22, 1 has been quiet for 31–120 days, 1 has not pushed in over 120 days. Topics are set by each repository’s own maintainers, so this is what those projects chose to call themselves rather than a category we assigned.
6 of 8 pushed within 30 days of the snapshot of 2026-09-22. How we measure it →
The list
All 8, most-starred first.
The last column is the most recent push GitHub reported to us on 2026-09-22. It counts a push to any branch, by a person or a bot — it is not a claim that anyone is maintaining the project, and a quiet repository may be a finished one.
| Project | What it does | Stars | Ship status | Last verified push |
|---|---|---|---|---|
| KeygraphHQ/shannon | Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production. | 48.3K | Still shipping | Sep 21, 2026 |
| Infisical/infisical | Infisical is the open-source platform for secrets, certificates, and privileged access management. | 29.4K | Still shipping | Sep 22, 2026 |
| vxcontrol/pentagi | Fully autonomous AI Agents system capable of performing complex penetration testing tasks | 24.9K | Still shipping | Sep 10, 2026 |
| smicallef/spiderfoot | SpiderFoot automates OSINT for threat intelligence and mapping your attack surface. | 22.5K | Gone silent | Apr 13, 2026 |
| wazuh/wazuh | Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads. | 17K | Still shipping | Sep 22, 2026 |
| CISOfy/lynis | Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional. | 16.4K | Still shipping | Sep 16, 2026 |
| prowler-cloud/prowler | Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment. | 14.8K | Still shipping | Sep 22, 2026 |
| 1N3/Sn1per | Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections. | 11.3K | Slowed | Jul 4, 2026 |
Related collections
Sideways from here.
The 8 largest other topics in the directory, then the other ways to slice it. Every count is as of the snapshot of 2026-09-22.
Snapshot of 2026-09-22 · 721 repos in the directory · every number on this page is measured against that date, not against today. What this measurement cannot tell you →