* [Shannon v3.4.0](https://github.com/KeygraphHQ/shannon) – Autonomous white-box AI pentester for web applications and APIs that analyzes source code and runs proof-of-concept exploits.

* [OSV-Scanner v2.7.0](https://github.com/google/osv-scanner) – Vulnerability scanner that identifies existing vulnerabilities in project dependencies.

* [KeyLeak Detector v0.7.0](https://github.com/Amal-David/keyleak-detector) – Runtime detector for exposed API keys and BaaS misconfigurations in web apps, with Chrome extension and CLI.

* [Argo v1.4.0](https://github.com/Ciyfly/Argo) – Go-based website crawler that combines static browsing with go-rod request hijacking to automatically extract URLs up to a configurable depth.

* [Drop v0.3.1](https://github.com/wrr/drop) – Drop creates disposable Linux sandboxed environments that isolate programs while keeping installed software, username, and selected configuration files available.

* [Phase Console v2.77.3](https://github.com/phasehq/console) – Platform for engineering teams to secure, manage, and deploy application secrets across environments.

* [Caddy WAF Middleware v0.4.16](https://github.com/fabriziosalmi/caddy-waf) – Highly customizable Web Application Firewall middleware providing advanced protection for the Caddy web server.

* [Yaklang 1.4.9-beta2](https://github.com/yaklang/yaklang) – Cybersecurity-focused domain-specific programming language with a dedicated virtual machine and IDE support.