application-security-tools 开源项目推荐（14 个）

google /mantis

一套模块化、无依赖栈的安全审查工具包，供AI编码代理自主发现、重现和修补漏洞。

ogmabox /ogma

A lightweight local proxy for web security testing.

Jaycubic /Distributed-Security-Control-Plane

Open-source distributed security control plane for asynchronous telemetry, cross-application threat correlation, deterministic detection, and cryptographically authenticated containment.

platform-sec /opengrep-action

GitHub Action for the OpenGrep static analysis tool

ogmabox /ogma-sdk

Official TypeScript SDK definitions for building Ogma plugins with HTTP interception, security findings, storage, events, API integration, and UI extensions

devshieldhq /devshield-action

AI-powered DevSecOps platform for vulnerability detection, deployment protection, and intelligent security analysis.

ogmabox /awesome-ogma-plugins

Curated registry of community-built plugins and extensions for the Ogma web security proxy

AliAmmar15 /velonus-cli

AI-native application security scanner for developers — finds real issues, explains why they matter, and generates fixes. Fully self-contained: velonus scan never sends your code anywhere.

LogicLune /Sentriq-AI

Sentriq AI — A local-first web security assessment toolkit for authorized SQL injection testing, authentication and access-control checks, Supabase/PostgreSQL auditing, and evidence-based security reports.

vibecoder0715 /Noulette

Noulette is a MCP platform that finds problems, propose fix and actually fix it (upon approvals) during app development and when running app in production.

Nehalkamal7 /DevGuard

Automated Code Security & Static Vulnerability Diagnostics Engine powered by Gemini 3.8 Flash & Fine-Tuned Qwen2.5-Coder SLM.

soham23 /graphql-query-builder

Generate GraphQL queries, mutations, wordlists, and path enumeration helpers from GraphQL introspection schemas.

harshahemanth /secret-scan

A lightweight secret-scanning CLI tool to detect API keys, tokens, passwords, and credentials in code repositories.

Harshal135701 /application-security-portfolio

Hands-on application security labs, web and API vulnerability assessments, and security research with practical write-ups, remediation guidance, and evidence.