Build software better, together

tirrenotechnologies / tirreno

tirreno is an open-source framework for in-house security. Event tracking, risk scoring and threat detection for your system.

intelligence log-analysis php-scripts banking audit-logs user-monitoring antispam cyber-security bot-detection application-monitoring fraud-detection php-project security-framework fraud bot-management runtime-security security-analytics audit-trails cybersecurity-projects

Updated Oct 24, 2026
PHP

blabla1337 / skf-flask

Star

Security Knowledge Framework (SKF) Python Flask / Angular project

security security-audit secure-by-default security-hardening security-training secure-coding security-framework security-standards owasp-skf security-knowledge security-requirements

Updated Mar 12, 2024
HTML

enkomio / Sojobo

Sponsor

Star

A binary analysis framework

security fsharp dotnet reverse-engineering malware-analyzer malware-analysis program-analysis malware-research security-tools security-framework b2r2

Updated Dec 17, 2020
F#

osintshifu / Cyber-Intelligence-GPT

Sponsor

Star

Advanced AI assistant for OSINT, cyber intelligence, digital forensics, threat analysis, ethical hacking, and security operations.

osint ai forensics dfir cybersecurity penetration-testing offensive-security opsec cybercrime security-framework investigation redteam osint-framework osint-tools ai-osint agentic-osint

Updated Oct 9, 2026

agentbaseline / agentbaseline

Star

Six security outcomes an enterprise must achieve to run AI agents, and the controls that evidence them. A draft for public comment.

security-framework ai-agents security-controls agent-security ai-agent-security

Updated Oct 14, 2026
Python

SAIL V2 (Secure AI Lifecycle) as an agent skill — the full 91-risk catalog for AI/agent gap assessments, security roadmaps, and compliance checklists. Installs on Claude Code, Codex, ChatGPT, Antigravity, and any SKILL.md-compatible agent.

compliance security-framework ai-security llm-security agentic-ai agent-skills claude-code claude-code-plugin

Updated Jul 7, 2026

bad-antics / nullsec

Star

💀 NullSec — Offensive Security Framework | 200+ tools, AI lab, mesh net, WiFi Pineapple, Flipper Zero, custom Linux distro

linux security framework tools ai hacking cybersecurity penetration-testing pentesting offensive-security red-team wifi-pineapple security-framework hacking-tools flipper-zero nullsec

Updated Apr 16, 2026
Shell

enkomio / Anathema

Sponsor

Star

.NET instrumentation framework

security dotnet instrumentation hooking security-framework

Updated Jan 16, 2018
F#

s4dhulabs / vimana-framework

Star

Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques.

experimental django-application hacking django-templates secops application-security flask-security information-security hacking-tool python-security django-template-language devsecops security-framework hacking-framework python3-application hackingtools django-security

Updated Oct 24, 2026
Python

bad-antics / nullkia

Star

NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics

Updated Apr 17, 2026
Go

seemoo-lab / chirpotle

Star

A LoRaWAN Security Evaluation Framework

lora lorawan riot-os security-framework

Updated Feb 11, 2024
Jupyter Notebook

jonathanristo / CTEMMM

Star

Continuous Threat Exposure Management Maturity Model (CTEMMM)

risk-management security-framework maturity-model ciso exposure-management ctem governance-risk-compliance continuous-threat-exposure-management-ctem continuous-threat-exposure-management

Updated Feb 6, 2026

s4dhul4bs / vimana-framework

Star

Vimana is an experimental security tool that aims to provide resources for auditing Python web applications.

Updated Aug 27, 2021

CroodSolutions / CTRL-ESC-HOST

Star

CTRL-ESC-HOST is an assessment methodology for testing for security flaws in Kiosks and Presented Applications.

kiosk security-framework redteaming mitre-attack exploit-techniques escape-to-host kiosk-hacking

Updated Aug 8, 2026
HTML

glferreira-devsecops / Cascavel

Sponsor

Star

🐍 Cascavel — The zero-friction offensive security engine. Automate Red Team scans, validate exposures (CTEM), and generate compliance reports in one command.