Audit GitHub Repositories (2026) · Open Source Tools

Automated auditing, performance metrics, and best practices for the web.

A simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and compliance.

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨

Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.

The website QA tool for your coding agent. 310+ audit rules across SEO, performance, security, accessibility and agent experience.

Track changes to your rails models

Enable Self-Service Operations: Give specific users access to your existing tools, services, and scripts

Log activity inside your Laravel app

Audited (formerly acts_as_audited) is an ORM extension that logs all changes to your Rails models.

Validation of best practices in your Kubernetes clusters

Pentest Report Generator

Public Chainguard Images

Pentest Report Generator

The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit log.

Self-hosted execution layer for AI agents: connect any agent to real APIs, scope exactly what it can touch, and keep credentials out of the agent's hands.

Bounded, layered, approval-gated, auditable cross-session memory for DeepSeek Harness: a ctx.memory capability seam with a zero-dependency SQLite provider, a memory tool, and frozen snapshot injection. Maintenance status: FROZEN since 2026-10-05.

A GRC Compliance tool for SaaS products to manage the entire lifecycle of security audits.

Man in the middle tool

Flamingock brings Change-as-Code (CaC) to your entire stack. It applies versioned, auditable changes to the external systems your application depends on — such as schemas, message brokers, databases, APIs, cloud services, and any other external system your application needs.