Provides public bug bounty programs in-scope data that offer rewards and monitors public bug bounty programs assets.

HackerOne "in scope" domains

Store and retrieve encrypted secrets with PowerShell on Windows, Linux, or MacOS and also from KeePass 2 databases on Windows

🐚 Python-powered, cross-platform, Unix-gazing shell.

Security automation content in SCAP, Bash, Ansible, and other formats

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

The AWS Secure Environment Accelerator is a tool designed to help deploy and operate secure multi-account, multi-region AWS environments on an ongoing basis. The power of the solution is the configuration file which enables the completely automated deployment of customizable architectures within AWS without changing a single line of code.

Vulnogram is a tool for creating and editing CVE information in CVE JSON format

DevSecOps, ASPM, Vulnerability Management. All on one platform.

Automation to assess the state of your M365 tenant against CISA's baselines

AssemblyLine 4: File triage and malware analysis

Automated Adversary Emulation Platform

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Infection Monkey - An open-source adversary emulation platform

IWA (Insecure Web App) Pharmacy Direct - an insecure web application for use in DevSecOps scenarios.

Official website for The Task Force Team

SecObserve is an open source vulnerability management system for software development and cloud environments. It supports a variety of open source vulnerability scanners and integrates easily into CI/CD pipelines.

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines