Top #security-audit Tools & Software

shannon

github

Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

lynis

github

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

vuls

github

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

DependencyCheck

github

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

brakeman

github

A static analysis security vulnerability scanner for Ruby on Rails applications

xunfeng

github

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

dockle

github

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

GScan

github

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

pwndoc

github

Pentest Report Generator

bundler-audit

github

Patch-level verification for Bundler

find-sec-bugs

github

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)