1534 Open source projects that are alternatives of or similar to Purify

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

Vulnerability assessment and penetration testing automation and reporting platform for teams.

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

🆕 The Multi-Tool Web Vulnerability Scanner.

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

Web application vulnerability scanner

Centralize Vulnerability Assessment and Management for DevSecOps Team

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

kube-scan: Octarine k8s cluster risk assessment tool

Identify vulnerabilities in running containers, images, hosts and repositories

Advanced vulnerability scanning with Nmap NSE

分布式资产安全扫描核心管理系统(弱口令扫描，漏洞扫描)

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

Backend logic implementation for Vulnerability Management System

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

A Blazing fast Security Auditing tool for Kubernetes

Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayHub project contain one click docker-compose file which configure and run images from docker hub.

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

secureCodeBox (SCB) - continuous secure delivery out of the box

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

Open-Source Security Architecture | 开源安全架构

Web Scan Lazy Tools - Python Package

Web-based Source Code Vulnerability Scanner

Secure, Unified, Powerful and Extensible Rust Android Analyzer

NebulousAD automated credential auditing tool.

Advanced and easy to use penetration testing framework 💣🔎

OSS Vulnerability Scanner for Windows Platform

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI and Google CloudBuild. No server required!

Dashboard to collect, analyze, and respond to reported phishing emails.

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

NERVE Continuous Vulnerability Scanner

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

a tool to analyze filesystem images for security

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

Open Vulnerability Assessment Scanner - Scanner for Greenbone Vulnerability Management (GVM)

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 200 controls covering CIS, ISO27001, GDPR, HIPAA, SOC2, ENS and other security frameworks.

Helps you continuously monitor and fix common security vulnerabilities in your Django application.

SEC分布式资产扫描系统

Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.

📚 Overview 🔒 Tooling 🔒 Process 🔒 Physical 🔒 People 📚

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

Collection of small security tools, mostly in Bash and Python. CTFs, Bug Bounty and other stuff.

Dradis Framework: Colllaboration and reporting for IT Security teams

红队综合渗透框架

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

Most usable tools for iOS penetration testing