* [Shannon v3.4.0](https://github.com/KeygraphHQ/shannon) – Autonomous white-box AI pentester for web applications and APIs that analyzes source code and runs proof-of-concept exploits.

* [Web-Check 2.3.0](https://github.com/lissy93/web-check) – On-demand website intelligence dashboard that gathers network, security, and performance data to help analyze attack vectors and understand site technologies.

* [OSV-Scanner v2.7.0](https://github.com/google/osv-scanner) – Vulnerability scanner that identifies existing vulnerabilities in project dependencies.

* [Trivy v0.75.0](https://github.com/aquasecurity/trivy) – Comprehensive security scanner for vulnerabilities, misconfigurations, and secrets across various targets.

* [KeyLeak Detector v0.7.0](https://github.com/Amal-David/keyleak-detector) – Runtime detector for exposed API keys and BaaS misconfigurations in web apps, with Chrome extension and CLI.

* [Argo v1.4.0](https://github.com/Ciyfly/Argo) – Go-based website crawler that combines static browsing with go-rod request hijacking to automatically extract URLs up to a configurable depth.

* [Osmedeus v5.1.2](https://github.com/j3ssie/osmedeus) – Workflow engine designed for scalable and customizable offensive security reconnaissance.

* [Sliver v1.7.8](https://github.com/BishopFox/sliver) – Cross-platform adversary emulation and red team framework with dynamic implants supporting multiple secure C2 protocols.

* [Kontext v1.10.0](https://github.com/kontext-security/kontext) – Kontext places local policy between AI agents and the tools they call, evaluating, enforcing, and recording authorization decisions before consequential actions run.

* [Fscan v2.2.2](https://github.com/shadow1ng/fscan) – Comprehensive internal network scanning tool for automated vulnerability scanning.

* [Drop v0.3.0](https://github.com/wrr/drop) – Drop creates disposable Linux sandboxed environments that isolate programs while keeping installed software, username, and selected configuration files available.

* [Phase Console v2.77.3](https://github.com/phasehq/console) – Platform for engineering teams to secure, manage, and deploy application secrets across environments.

* [Caddy WAF Middleware v0.4.16](https://github.com/fabriziosalmi/caddy-waf) – Highly customizable Web Application Firewall middleware providing advanced protection for the Caddy web server.

* [js-x-ray @nodesecure/js-x-ray...](https://github.com/NodeSecure/js-x-ray) – JavaScript AST analysis tool for identifying potentially malicious code patterns.

* [Amazing Sandbox (asb) 1.19](https://github.com/ashishb/amazing-sandbox) – Sandbox runner that executes tools and AI agents with controlled filesystem and optional network access for safer local execution.

* [Greenmask v0.2.25](https://github.com/GreenmaskIO/greenmask) – Tool for database anonymization and synthetic data generation.

* [Yaklang 1.4.9-beta2](https://github.com/yaklang/yaklang) – Cybersecurity-focused domain-specific programming language with a dedicated virtual machine and IDE support.