RedHatProductSecurity/rapidast

Dynamic Application and API Security Testing

OWASP Foundation web repository

secureCodeBox (SCB) - continuous secure delivery out of the box

OXO is a security scanning orchestrator for the modern age.

Find and fix web-app vulnerabilities in one command — SAST + DAST + AI, for devs who aren't security experts.

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

AI-driven Dynamic Application Security Testing tool for security engineers. Combines an HTTPS MITM proxy with a multi-agent scanner and a real-time web dashboard. Route any browser or tool through the proxy — findings appear automatically.

Open-source, self-hosted web pentesting suite with agentic scanning, analyst tools, API testing, model checkpoints and MCP integrations.

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.