Top SECURITY GitHub Repositories & Tools (2026)

Free Windows, Mac and Linux cleaner, scanner, and more.

A WiFi security auditing software

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

JSON.parse with hard limits on nesting depth, key count, string length and input size. Refuses parser bombs before they are allocated.

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

eBPF-based Networking, Security, and Observability

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Coverage, security and code quality for coding agents

The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.

The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, quizzes, and production-ready templates. 430K+ lines.

All-in-one open source Session Border Controller in pure Go. One static binary, one YAML file: trunk B2BUA, edge proxy, RTP/SRTP relay, WebRTC gateway, built-in SIP security.

A Rust port of shadowsocks

SAM

🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.

Cross-platform desktop GUI app to clean image metadata

Terminal UI for WireGuard and OpenVPN with multi-tunnel control, real-time telemetry, and leak guarding.

Cloud Native Runtime Security

Open-source adversarial testing engine, SDK, and CLI for AI agents. Runs locally or against the Humanbound Platform.

Documenting my security research journey: This repository contains detailed vulnerability write-ups, proof-of-concept (PoC) exploits, and the custom automation tools I use for reconnaissance and system assessment.