Best open-source Security projects

A web-based management platform for operating Fail2Ban across one or more Linux hosts, with centralized ban review, unban search, and alerts.

A zero-knowledge, end-to-end encrypted pastebin where notes are encrypted in the browser and self-destruct after one read or 24 hours.

A web toolkit for analyzing any domain, covering DNS records, IP geolocation, WHOIS, and SSL/TLS certificate history.

A CLI and TypeScript SDK from OpenAI for scanning code for security vulnerabilities, validating findings, and generating fixes.

A Go-based all-in-one framework for reconnaissance and MITM attacks across WiFi, BLE, wireless HID, CAN-bus and IPv4/IPv6 networks.

Open-source password manager built with Flutter, compatible with KeePass 2.x (KDBX 3 and KDBX 4) databases across mobile, desktop and web.

An AI agent skill pack that routes reverse engineering, pentest, and CTF tasks to the right methodology and toolchain.

An AI-driven penetration testing tool that uses multiple LLM providers to generate payloads and scan web targets for 50+ vulnerability types.

An agent skill and stdlib Python service that strips AI provenance marks and C2PA metadata from text and files you own.

A curated library of offensive security SKILL.md files that give Claude methodology for specific attack surfaces, from SQL injection to EDR evasion.

A coding-agent skill that guides an AI agent through a multi-phase security audit with independently verified, machine-readable findings.

A terminal AI assistant for authorized penetration testing that plans scoped work, runs real security tools, asks approval for sensitive actions, and writes evidence-backed findings.

Free, open-source system cleaner and security scanner for Windows, macOS, and Linux that removes caches, malware, and startup bloat.

A bash tool that stores encrypted private files inside a git repository, encrypted for specific team members' GPG keys.

An active TLS server fingerprinting tool that sends 10 crafted Client Hello probes to a server and hashes the responses into a JARM fingerprint.

Open-source OSINT automation tool that gathers data on a target and maps its attack surface, with a web UI and CLI.

Go-based network reconnaissance tool that discovers, identifies and monitors devices on your local network in real time, with a web console.

A categorized web directory of free OSINT tools and resources for gathering information from public sources, organized as an interactive tree.