application-security-tools

A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.

A lightweight local proxy for web security testing.

Open-source distributed security control plane for asynchronous telemetry, cross-application threat correlation, deterministic detection, and cryptographically authenticated containment.

GitHub Action for the OpenGrep static analysis tool

AI-powered DevSecOps platform for vulnerability detection, deployment protection, and intelligent security analysis.

Sentriq AI — A local-first web security assessment toolkit for authorized SQL injection testing, authentication and access-control checks, Supabase/PostgreSQL auditing, and evidence-based security reports.

AI-native application security scanner for developers — finds real issues, explains why they matter, and generates fixes. Fully self-contained: velonus scan never sends your code anywhere.

Noulette is a MCP platform that finds problems, propose fix and actually fix it (upon approvals) during app development and when running app in production.

Curated registry of community-built plugins and extensions for the Ogma web security proxy

Official TypeScript SDK definitions for building Ogma plugins with HTTP interception, security findings, storage, events, API integration, and UI extensions

Generate GraphQL queries, mutations, wordlists, and path enumeration helpers from GraphQL introspection schemas.

Automated Code Security & Static Vulnerability Diagnostics Engine powered by Gemini 3.8 Flash & Fine-Tuned Qwen2.5-Coder SLM.

A lightweight secret-scanning CLI tool to detect API keys, tokens, passwords, and credentials in code repositories.