Top SEC GitHub Repositories & Tools (2026)

Fast web fuzzer written in Go

agent runtime security - zero trust, zero setup, zero latency.

Linux sandboxing that doesn't get in your way

Static analysis for GitHub Actions

Get tasks and ideas out of your head. A free GTD to-do app for desktop and mobile. Works offline, no account needed

Android companion app for the NRSuite security research toolkit. Wi-Fi/BLE offense and defense modules, pcap capture, credential management, and ESP32 firmware flashing over USB-OTG.

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

Comfortably monitor your network traffic 🕵️‍♂️

Open-source AI video platform: a self-hosted NVR (ONVIF/RTSP, recording, WebRTC) plus any AI model through one adapter contract, an app SDK and a catalog of ready-made apps. Offline-first, air-gapped capable, Home Assistant built in. AGPLv3. A Frigate / ZoneMinder alternative you can build on.

Free and Open Source Reverse Engineering Platform powered by rizin

Open-source universal artifact registry. Drop-in Artifactory/Nexus alternative with 40+ package formats, security scanning, WASM plugins, and edge replication.

Low code web framework for real world applications, in Python and Javascript

Free Windows, Mac and Linux cleaner, scanner, and more.

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

Customer-run client for Secure MCP Tunnel: connect private or localhost MCP servers to ChatGPT, Codex, the Responses API, and AgentKit without exposing them to the public internet.

JSON.parse with hard limits on nesting depth, key count, string length and input size. Refuses parser bombs before they are allocated.

An AI second brain that maintains itself. Full guide, starter vault, agent skills and scripts for a self-organizing knowledge base in Claude Code and Obsidian.

ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.

All-in-one open source Session Border Controller in pure Go. One static binary, one YAML file: trunk B2BUA, edge proxy, RTP/SRTP relay, WebRTC gateway, built-in SIP security.

Fully autonomous AI Agents system capable of performing complex penetration testing tasks