Data / Repositories / Security tools
Security tools repositories on GitHub: 26 ranked by stars
26 public repositories tagged Security tools are on GitHub, with 116,752 stars between them; 18 had a push in the last 30 days. Most are written in Python (11), JavaScript (4), Go (3). The most starred: vxcontrol/pentagi (29,064), NVIDIA/SkillSpector (20,177), prowler-cloud/prowler (15,030).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Language | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|---|
| vxcontrol/pentagi | Fully autonomous AI Agents system capable of performing complex penetration testing tasks | Go | 29,064 | 4,370 | MIT | Oct 9 | Oct 14 |
| NVIDIA/SkillSpector | Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code… | Python | 20,177 | 1,776 | Apache-2.0 | Oct 14 | Oct 14 |
| prowler-cloud/prowler | Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment. | Python | 15,030 | 2,433 | Apache-2.0 | Oct 14 | Oct 14 |
| A-poc/RedTeam-Tools | Tools and Techniques for Red Team / Penetration Testing | 9,819 | 1,315 | Apr 18 | Oct 11 | ||
| six2dez/reconftw | reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities | Shell | 8,178 | 1,240 | MIT | Sep 26 | Oct 11 |
| Tencent/AI-Infra-Guard | A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation. | Python | 6,868 | 661 | Apache-2.0 | Oct 14 | Oct 14 |
| vavkamil/awesome-bugbounty-tools | A curated list of various bug bounty tools | 6,300 | 1,009 | CC0-1.0 | Oct 6 | Oct 11 | |
| jekil/awesome-hacking | Awesome hacking is an awesome collection of hacking tools. | Python | 4,008 | 642 | May 16 | Oct 11 | |
| arch3rPro/Pentest-Windows | Windows11 Penetration Suite Toolkit The First Windows Penetration Testing Environment on Mac M Chips | 3,600 | 343 | Jun 28, 2025 | Oct 11 | ||
| danieldurnea/FBI-tools | OSINT Tools for gathering information and actions forensics | 2,700 | 379 | Mar 12, 2025 | Oct 11 | ||
| jiwoochris/artex-global | ARTEX 한국어판 · AI 자율 침투 테스트 프레임워크(upstream: Autumn-27/ARTEX, AGPL-3.0) | Go | 1,893 | 2,100 | AGPL-3.0 | Oct 14 | Oct 21 |
| ossf/cve-bin-tool | The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2… | Python | 1,777 | 670 | GPL-3.0 | Oct 7 | Oct 11 |
| Ge0rg3/requests-ip-rotator | A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing. | Python | 1,679 | 173 | GPL-3.0 | Jul 13 | Sep 21 |
| mongodb/kingfisher | Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python. | Rust | 1,260 | 123 | Apache-2.0 | Oct 7 | Oct 11 |
| bountyyfi/lonkero | Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust. | Rust | 1,104 | 92 | Aug 16 | Oct 14 | |
| morluto/awesome-reverse-engineering | Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols. | Python | 1,052 | 239 | CC0-1.0 | Oct 20 | Oct 21 |
| H-mmer/pentest-agents | Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops… | Python | 1,008 | 188 | Jun 12 | Oct 14 | |
| openqodex/openqodex | Open source code review that runs in your coding agent before you push. Scanners plus a separate AI reviewer, on your own login, no key. | TypeScript | 709 | 56 | Apache-2.0 | Oct 15 | Oct 15 |
| mcp-shark/mcp-shark | Wireshark-like forensic analysis for Model Context Protocol communications Capture, inspect, and investigate all HTTP requests and responses between your IDE and MCP servers | JavaScript | 179 | 15 | Apr 26 | Oct 14 | |
| ciceroyang/agentgate | Control plane for the tools agents run: inventory, evidence, policy, enforcement. Clean is only emitted when every check ran. · agent 工具层的控制面：清单、证据、策略、执行；只有每个检查都跑完，才会给出 clean。 | JavaScript | 102 | 1 | AGPL-3.0 | Oct 15 | Oct 15 |
| INFOKOM-KI/Wazuh-MCP-Server | Wazuh MCP Server: AI-Driven SOC Automation | Python | 92 | 25 | BSD-3-Clause | Oct 14 | Oct 14 |
| skyvanguard/awesome-ai-pentesting | A curated list of AI-powered pentesting tools, frameworks, MCP servers, and resources for autonomous cybersecurity operations | Python | 77 | 14 | MIT | Oct 9 | Oct 14 |
| charlesjones-dev/ai-agent-plugins | Plugins for git and project workflows, code audits and release checks. All 13 run in Claude Code, and 8 also run in Codex and Cursor. | Python | 35 | 3 | MIT | Oct 14 | Oct 14 |
| nsasoft/nsauditor-ai | NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration.… | JavaScript | 20 | 6 | MIT | Oct 12 | Oct 14 |
| safe-agentic-world/nomos | Deny-wins policy hook for Claude Code and Codex. Checks every shell, file, and fetch call against rules you keep in Git, holds under --dangerously-skip-permissions, refuses… | Go | 19 | 1 | Apache-2.0 | Sep 27 | Oct 14 |
| bountyoperator/bounty-operator | Find the hole in your bug bounty report before the triager does. Pre-submission review for bounty reports and smart-contract findings, on your own model key. | JavaScript | 2 | 0 | MIT | Oct 14 | Oct 14 |
By language
- Python 11
- JavaScript 4
- Go 3
Related topics
- Security 15
- AI agents 8
- MCP 8
- Penetration testing 7
- Cybersecurity 6
- Pentesting 6
- LLM 6
- Security automation 5
- AI security 5
- Claude Code 5
- Devsecops 5
- Bug bounty 5
Read from GitHub by SpecStream between September 21, 2026 and October 21, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.