Agentic pentest tooling. Currently achieving 81% (KIMI K2.5) on XBOW's benchmark in full black-box. Completely Self-hosted. Every model available on LiteLLM (Ollama, anthropic, openai...)
-
Updated
Aug 7, 2026 - Python
#
secure-coding
Here are 136 public repositories matching this topic...
A multi-vault secret injection tool for safely injecting secrets into app environment
python security cybersecurity command-line-tool developer-experience hashicorp-vault devops-tools azure-keyvault secure-coding security-tools devsecops aws-secrets-manager secure-software-development gcp-secrets-manager
-
Updated
Jun 4, 2026 - Python
Dependency Combobulator
-
Updated
Jan 10, 2024 - Python
A secure file system for your agents to execute code
security vm ai virtual-machine sandbox artificial-intelligence file-system code-execution secure-coding ai-agents ai-tools llm generative-ai llmops agent-tools agentic-ai
-
Updated
Aug 13, 2026 - Python
♾️ Collection of DevSecOps Notes + Resources + Courses + Tools
secret-management threat-modeling threat-model secure-coding sdlc secure-development iast devsecops software-composition-analysis sast sbom dependency-track defectdojo devsecops-best-practices software-bill-of-material devsecops-resources devsecops-notes static-analysis-security-testing
-
Updated
Jan 20, 2025 - Python
Reapsaw is a continuous security devsecops tool, which helps in enabling security into CI/CD Pipeline. It supports coverage for multiple programming languages.
-
Updated
Sep 23, 2020 - Python
A quick script to spot the usage of Unicode Bidi (bidirectional) characters that could lead to an Invisible Backdoor
-
Updated
Nov 17, 2022 - Python
Hands-on secure code review training: learn to find vulnerabilities in Flask, Django, FastAPI through production-quality examples. Whitebox pentesting for modern web frameworks.
hacking code-review web-security pentesting appsec unsafe-code security-training secure-coding vulnerable-web-app web-application-security security-research api-security whitebox-testing cybersecurity-education
-
Updated
May 3, 2026 - Python
A controlled environment for demonstrating and understanding buffer overflow vulnerabilities in web applications. This project is designed for educational purposes as part of secure software development training.
exploit university-project cybersecurity buffer-overflow-attack buffer-overflow secure-coding python-projects secure-software-development 0x4m4
-
Updated
Jan 27, 2025 - Python
A repository of Security Engineering exercises: these exercises are designed to prepare you for interviews.
python cryptography owasp web-security ctf appsec security-training network-security secure-coding security-engineering security-exercises
-
Updated
Aug 15, 2026 - Python
Agent-native code security review with MCP, structured findings, and practical pre-merge scanning workflows.
-
Updated
Apr 2, 2026 - Python
Engineering best practices that AI coding agents actually apply — 40+ skills, from secure coding and cloud to compliance and UX writing. BUILD + AUDIT modes. Measured: best-practice coverage 59% → 98% vs. the same model unguided.
security-audit skills best-practices developer-tools code-review code-quality threat-modeling software-architecture secure-coding devsecops ai-agents claude llm prompt-engineering anthropic claude-code ai-coding-assistant claude-skills
-
Updated
Aug 14, 2026 - Python
Learn web vulnerabilities — writeups, multi-language vulnerable/fixed code, OWASP Top 10 mapping, attack-path diagrams, and a runnable offline lab for each (SQLi, XSS, and more). For cybersecurity, AppSec, SOC, pentesters.
owasp penetration-testing infosec web-security ctf vulnerabilities appsec ethical-hacking secure-coding vulnerable-web-application appsecurity oswa
-
Updated
Jul 20, 2026 - Python
Real-World Security Conversations for AI Training
security machine-learning ai model owasp cve secure-coding owasp-top-10 ai-agents model-training ai-security
-
Updated
Jul 6, 2026 - Python
Host-agnostic pre-write security hook for coding agent: detects user-input patterns via Semgrep and emits deterministic, no-LLM security guidance.
security static-analysis vulnerability-detection secure-coding devsecops sast pre-commit-hook semgrep claude-code ai-coding-assistant
-
Updated
Jul 22, 2026 - Python
Centralized STIG & NIST 800-53 compliance knowledge, playbooks, and secure code templates for federal systems development.
federal-government stig fedramp secure-coding security-compliance compliance-automation nist-800-53 security-templates
-
Updated
May 12, 2026 - Python
Secure-coding gates for AI-written code — 67 gates across 13 OWASP-aligned topics, checked before code ships.
security ai owasp application-security secure-by-default cursor appsec codex secure-coding devsecops ai-agents sast code-security llm ai-coding agent-skills vibe-coding claude-code
-
Updated
Aug 4, 2026 - Python
Language- and framework-agnostic audit checklists for AI coding agents — security, correctness, and operability. Works with Claude Code, GitHub Copilot, Cursor, Codex CLI, OpenCode, and any agent that can read files.
security-audit code-review cursor appsec codex secure-coding code-audit github-copilot llm agent-skills claude-code ai-coding-agents
-
Updated
Jul 3, 2026 - Python
A demo security vault application, for training and experimenting with OWASP and security tools.
-
Updated
Jun 21, 2026 - Python
Backend security Agent Skill that helps AI audit code, detect vulnerabilities, and generate secure-by-default backend applications, with deep Django/DRF coverage and guidance for any backend stack.
python security django skill django-rest-framework owasp developer-tools cursor appsec codex secure-coding claude backend-security ai-agent api-security-testing gemini-cli agent-skills claude-code codex-cli code-review-assistant
-
Updated
Aug 14, 2026 - Python
Improve this page
Add a description, image, and links to the secure-coding topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the secure-coding topic, visit your repo's landing page and select "manage topics."