Top SECURITY GitHub Repositories & Tools (2026)

Endo is a distributed secure JavaScript sandbox, based on SES

DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.

:key: Hash type identifier (CLI & lib)

ZAP Add-ons

Deterministic guardrails that don't break agents

10-20x more blocks for your CrowdSec bouncers — 120k+ IPs from 32 free threat feeds

Dradis Framework: Collaboration and reporting for IT Security teams

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

Tenzir is the data pipeline engine for security teams.

Source code for 2FAS Auth iOS app

Go implementation of The Update Framework (TUF)

AntiHunter Perimeter Defense Systems - DIGI Node Firmware

A security layer for Git repositories

The memory + security kernel for AI agents. Strata: a signed append-only log, receipts on every write, exact-handle recall, memory agents can't rewrite. Operator Lite: a GuardFall-proof gate on 16 hosts.

Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable.

Pen Test Report Generation and Assessment Collaboration

OpenCTI Connectors

Grab your DNS logs, detect anomalies, and finally understand what's happening on your network. The missing piece between DNS servers and your data stack.

Mapping the information system / Cartographie du système d'information

KASLD defeats Linux kernel KASLR from a local process — recovering the virtual and physical memory layout where a leak or side channel allows, and narrowing it to the smallest set of placements the evidence supports otherwise.