Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

cwe_checker finds vulnerable patterns in binary executables

The Correlated CVE Vulnerability And Threat Intelligence Database API

OSINT tool - gets data from services like shodan, censys etc. in one app

Collection of penetration test reports and pentest report templates. Published by the the best security companies in the world.

Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK D3FEND and ATLAS Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.

Corax for Java: A general static analysis framework for java code checking.

Vulnogram is the tool for reserving, managing, and publishing CVEs. Get started at vulnogram.org or deploy Docker edition for full enterprise features.

Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 categories. 11 security domains, 60+ secret patterns, parallel subagent analysis, professional report generation. Built by tododeia.com

AI-native code security auditor on AgentField that proves exploitability with verdicts, traces, and actionable evidence.

Open-Source Vulnerability Intelligence Center - Unified source of vulnerability, exploit and threat Intelligence feeds

The goal of this project is to provide additional features on top of the existing npm audit options

"Linking Threat Tactics, Techniques, and Patterns with Defensive Weaknesses, Vulnerabilities and Affected Platform Configurations for Cyber Hunting" by Erik Hemberg, Jonathan Kelly, Michal Shlapentokh-Rothman, Bryn Reinstadler, Katherine Xu, Nick Rutar, Una-May O'Reilly

Python API for vFeed Vulnerability & Threat Intelligence Database Enterprise & Pro Editions

Repository for "SecurityEval Dataset: Mining Vulnerability Examples to Evaluate Machine Learning-Based Code Generation Techniques" published in MSR4P&S'22.

Collection of CVEs from Sick Codes, or collaborations on https://sick.codes security research & advisories.

Open Source Tool - Cybersecurity Graph Database in Neo4j

One command. 29 battle-tested security checks built into every AI coding assistant you already use without leaving your IDE.

A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.