Open source. Open possibilities.

Trivy is a comprehensive security scanner used to detect vulnerabilities, misconfigurations, secrets, and SBOMs across various targets including containers, Kubernetes, and code repositories.

A curated collection of Web Application Security payloads and bypasses for pentesting and CTFs, covering vulnerability descriptions, exploitation techniques, and Burp Intruder file sets.

Proof-of-concept tool that generates serialized Java payloads exploiting unsafe object deserialization, bundling 30+ gadget chains for libraries such as Commons Collections, Spring, Groovy and Hibernate, intended for security research and authorized testing.

SafeLine is a self-hosted web application firewall and reverse proxy that sits in front of web apps to filter and block malicious HTTP/S traffic, offering rate limiting, bot and authentication challenges, dynamic HTML/JS encryption and access control lists.

TerraSecure is an ML-powered security scanner for Terraform and HCL Infrastructure as Code across AWS, Azure, and GCP. It detects cloud misconfigurations at build time using a multi-cloud rule engine, an XGBoost ML model for AWS, and AI analysis for contextual remediation, integrating with CI/CD workflows.