#security-tools

elementalsouls/Claude-BugHunter

Python

90

health

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

jason5ng32/MyIP

JavaScript

89

health

The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.

Tencent/AI-Infra-Guard

Python

89

health

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

dmachard/DNS-collector

Go

89

health

Grab your DNS logs, detect anomalies, and finally understand what's happening on your network. The missing piece between DNS servers and your data stack.

luckyPipewrench/pipelock

Go

89

health

Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.

trufflesecurity/trufflehog

Go

89

health

Find, verify, and analyze leaked credentials

HyperDbg/HyperDbg

C

89

health

State-of-the-art native debugging tools

edoardottt/secfiles

Shell

89

health

My useful files for penetration tests, security assessments, bug bounty and other security related stuff

dotenvx/dotenvx

JavaScript

88

health

a secure dotenv–from the creator of `dotenv`

zizmorcore/zizmor

Rust

88

health

Static analysis for GitHub Actions

Asymptote-Labs/agent-beacon

Go

88

health

Agent Beacon is the world's first open-source telemetry layer for AI agents wherever they run: locally, in CI, or in the cloud.

pglombardo/PasswordPusher

Ruby

88

health

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

Checkmarx/kics

Open Policy Agent

87

health

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.