awslabs/automated-security-helper

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Protect against malicious open source packages 🤖

OXO is a security scanning orchestrator for the modern age.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents

Metis is an open-source, AI-driven tool for deep security code review

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.