Search Packages

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

libsast

Generic SAST Library

mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

skylos

Open-source PR gate for Python, TS/JS, Java, and Go. Stop merging dead code, secrets, security flows, and AI-code regressions.

njsscan

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

cycode

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning

medusa-security

AI-first security scanner with 76 analyzers, 9,600+ detection rules, and repo poisoning detection for AI/ML, LLM agents, and MCP servers. Scan any GitHub repo with: medusa scan --git user/repo

permi

AI-powered vulnerability scanner for Nigerian developers and global SMBs

codepathfinder

Static Code Analysis for security teams with Inter file taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP

crossfire-rules

Regex rule overlap analyzer for DLP, secret scanning, SAST, and IDS tools

codeaudit

Codeaudit - Modern Python source code security analyzer based on distrust.

securescan

Security scanning without the SaaS tax. Multi-scanner orchestration, baseline diffing, SBOM + SARIF, signed everything — runs in your terminal, your CI, or a dashboard you own.

precli

Precaution CLI - command line static application security testing tool

nazar

🧿 Autonomous Security & Quality Scanner - Zero-config, framework-aware, 197+ automated checks

finite-state-sdk

Python SDK for the Finite State Platform API

terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

dockerent

The only open-source tool to analyze vulnerabilities and configuration issues with running docker container(s) and docker networks.

joern-lib

Python library for code analysis with CPG and Joern

vulnhawk

AI-powered code security scanner that finds vulnerabilities Semgrep and CodeQL miss

authdrift

Find OAuth handlers that will break when users rename their Gmail.

latio

Use AI to Scan Your Code from the Command Line for security and code smells. Bring your own keys. Supports OpenAI and Gemini

mcp-shield-audit

Security audit framework for MCP (Model Context Protocol) servers

iam-sarif-report

No description available

veracode-python

Python wrapper for the Veracode XML APIs