A hand-curated library of 123+ repositories — AI agents, developer productivity, system design, security, mobile, and more — picked by editors for lasting value, not a 24-hour trending snapshot.
10 repositories • Page 1 of 1
“The most practical secure-coding reference that exists - concrete, actionable guidance per vulnerability class, not a wall of theory.”
“Static analysis that's actually fast enough to run on every pull request - the rule syntax is simple enough that teams write their own custom checks instead of just accepting defaults.”
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
“A fast, all-in-one vulnerability scanner - containers, filesystems, git repos, and Terraform/IaC misconfigurations all covered by one CLI tool.”
“A deliberately vulnerable web app for practicing security testing - the most effective way to actually understand OWASP Top 10 vulnerabilities is to exploit them yourself, safely.”
“Watches system calls in real time to catch suspicious runtime behavior in containers - the detection layer static image scanning alone can't provide.”
“The standard penetration testing framework - essential for offensive security work, strictly for authorized testing on systems you own or have permission to test.”
“Scans commits (and full git history) for leaked secrets - the cheapest insurance policy against an accidental key leak turning into an incident.”
“A genuinely full-featured open-source SIEM - threat detection, compliance, and log analysis without the licensing cost of commercial platforms.”
“The most widely used free web app security scanner (OWASP ZAP) - a solid first line of defense for catching common web vulnerabilities pre-release.”
“eBPF-based runtime security enforcement from the Cilium team - it can observe and block risky behavior at the kernel level with a lighter footprint than traditional agents.”
Jump straight to the category you care about
123
Curated Repositories
64
Hidden Gems
