Tools
murphysec
murphysecurity/murphysec
A software supply-chain security CLI that analyzes direct and transitive project dependencies and detects known vulnerabilities, with CI/CD integration.
Topics
Related projects
OpenSCA-cli1.1kOpenSCA-cli is a software composition analysis tool that parses dependency manifests across languages to detect vulnerabilities and license issues, generating SBOMs and reports in many formats.
trivy39.3kA comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM issues across container images, filesystems, repositories, Kubernetes, and clouds.
nuclei32.9kA fast, template-driven vulnerability scanner that uses a simple YAML DSL to detect CVEs, misconfigurations, and other security issues across web apps, networks, and cloud environments.
wazuh17.7kWazuh is an open-source security platform combining XDR and SIEM. Endpoint agents and a management server collect and analyze logs to deliver intrusion detection, file integrity monitoring, vulnerability detection, configuration assessment and incident response across on-premises and cloud workloads.
fscan14.8kFscan is an intranet comprehensive scanning tool that combines host discovery, port scanning, service fingerprinting, weak-password brute force, vulnerability detection and exploitation. It runs from the command line and can also be embedded as a Go SDK.
vuls12.3kAn agent-less vulnerability scanner for Linux, FreeBSD, containers and more, automatically detecting and reporting security vulnerabilities.