application-security-tools

A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.

A lightweight local proxy for web security testing.

GitHub Action for the OpenGrep static analysis tool

Open-source distributed security control plane for asynchronous telemetry, cross-application threat correlation, deterministic detection, and cryptographically authenticated containment.

AI-powered DevSecOps platform for vulnerability detection, deployment protection, and intelligent security analysis.

AI-native application security scanner for developers — finds real issues, explains why they matter, and generates fixes. Fully self-contained: velonus scan never sends your code anywhere.

A lightweight secret-scanning CLI tool to detect API keys, tokens, passwords, and credentials in code repositories.

Generate GraphQL queries, mutations, wordlists, and path enumeration helpers from GraphQL introspection schemas.

Automated Code Security & Static Vulnerability Diagnostics Engine powered by Gemini 3.8 Flash & Fine-Tuned Qwen2.5-Coder SLM.

Noulette is a MCP platform that finds problems, propose fix and actually fix it (upon approvals) during app development and when running app in production.

Official TypeScript SDK definitions for building Ogma plugins with HTTP interception, security findings, storage, events, API integration, and UI extensions

Curated registry of community-built plugins and extensions for the Ogma web security proxy