2048 Open source projects that are alternatives of or similar to Lynis

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 200 controls covering CIS, ISO27001, GDPR, HIPAA, SOC2, ENS and other security frameworks.

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.

🆕 The Multi-Tool Web Vulnerability Scanner.

Open-Source Security Architecture | 开源安全架构

Wazuh - Kibana plugin

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

Security automation content in SCAP, OSCAL, Bash, Ansible, and other formats

Advanced vulnerability scanning with Nmap NSE

Wazuh - Ruleset

Wazuh - Chef cookbooks

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

Wazuh - Tools for packages creation

System Optimizer and Monitoring, Security Auditing, Vulnerability scanner for Linux, macOS, and UNIX-based systems

Provides various Windows Server Active Directory (AD) security-focused reports.

Wazuh - Ansible playbook

NERVE Continuous Vulnerability Scanner

Wazuh - Project documentation

Wazuh - Puppet module

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

All-in-one tool for managing vulnerability reports from AppSec pipelines

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Simple Golang HTTPS/TLS Examples

Wazuh - The Open Source Security Platform

Wazuh - Docker containers

Passively scan for Bluetooth Low Energy devices and attempt to fingerprint them

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Advanced and easy to use penetration testing framework 💣🔎

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

kube-scan: Octarine k8s cluster risk assessment tool

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈

A Blazing fast Security Auditing tool for Kubernetes

Anteater - CI/CD Gate Check Framework

immudb - world’s fastest immutable database, built on a zero trust model

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

Hardening Ubuntu. Systemd edition.

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI and Google CloudBuild. No server required!

InQL - A Burp Extension for GraphQL Security Testing

Centralize Vulnerability Assessment and Management for DevSecOps Team

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

☁️Haven GRC - easier governance, risk, and compliance 👨‍⚕️👮‍♀️🦸‍♀️🕵️‍♀️👩‍🔬

Wazuh - Amazon AWS Cloudformation

Advanced Web Browser Fingerprinting

grep rough audit - source code auditing tool

Secure, human-friendly, cross-platform secrets and config.

Continuously monitor your AWS services for configurations that can lead to degradation of confidentiality, integrity or availability. All results will be sent to Security Hub for further aggregation and analysis.

A static analysis security vulnerability scanner for Ruby on Rails applications

Web Scan Lazy Tools - Python Package

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

Scripts to gather system configuration information for offline/remote auditing

Continuous Auditing & Configuration

Web-based Source Code Vulnerability Scanner

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

Secure, Unified, Powerful and Extensible Rust Android Analyzer