Open Source SaaS Alternatives, Self-Hosted Software & COSS Benchmarks

91 projects

Application & Cloud SecurityCommercial competitors →Market trends →Hero & design styles →

Open-source projects · GitHub Stars
Project	Tagline	License & Stack	Stars	Visits	Commercial
パロアルトネットワークスな日々js-cookie/js-cookieパロアルトネットワークスで安全な毎日を	パロアルトネットワークスで安全な毎日を	MIT	622	6.2K	—
WP Scanwpscanteam/wpscanWPScan is an enterprise vulnerability database for WordPress. Be the first to know about vulnerabilities affecting your WordPress core, plugins & themes.	WPScan is an enterprise vulnerability database for WordPress. Be the first to know about vulnerabilities affecting your WordPress core, plugins & themes.		616	<5K	—
vetvet-run/vetDon't just run it — vet it.	Don't just run it — vet it.	—	570	<5K	—
SafeDepCOSSsafedep/vetYour biggest AppSec blind spot is the code you never wrote.	Your biggest AppSec blind spot is the code you never wrote.	Apache	448	12.2K	$80/mo
SpyboyCOSSspyboy-productions/r4venA Unified Cross-Platform Security Ecosystem	A Unified Cross-Platform Security Ecosystem	—	448	<5K	$25/mo
open-appsecopenappsec/openappsecautomatic web application & API security using machine learning	automatic web application & API security using machine learning	Apache	382	20.2K	—
Bearerbearer/bearerBearer has been acquired by Cycode, the complete ASPM.	Bearer has been acquired by Cycode, the complete ASPM.	MIT	312	<5K	—
Aktoakto-api-security/aktoSecure AI Agents, MCPs, LLMs, Skills with Akto	Secure AI Agents, MCPs, LLMs, Skills with Akto	MIT	293	27.5K	—
BugbaseMCPbugbasesecurity/pentest-copilotContinuous, Real-World Security Testing.	Continuous, Real-World Security Testing.	MIT	279	17.5K	—
SecroverSecrover/SecroverOpen-Source Security Reports, Made Simple	Open-Source Security Reports, Made Simple	GPL	260	—	—
pompelmipompelmi/pompelmiNode.js antivirus scanning via ClamAV — simple, cross-platform, zero config	Node.js antivirus scanning via ClamAV — simple, cross-platform, zero config	MIT	248	<5K	—
keyshadeCOSSkeyshade-xyz/keyshadeThe smarter .env file replacement	The smarter .env file replacement	MPL	227	—	—
mkcert Web UIjeffcaldwellca/mkcertWebModern web interface for mkcert	Modern web interface for mkcert	GPL	222	—	—
PhaseCOSSphasehq/consoleSecrets management for teams and AI agents	Secrets management for teams and AI agents	—	222	—	$12/mo
Shelvehugorcd/shelveSecrets Management, Simplified	Secrets Management, Simplified	Apache	181	<5K	—
MCP DefenderCOSSMCP-Defender/MCP-DefenderAI App Security	AI App Security	—	142	—	$30/mo
SHIP SAFECOSSasamassekou10/ship-safeShip safe. Find risky code before it merges.	Ship safe. Find risky code before it merges.	MIT	118	—	$9
PWgenjocxfin/pwgenSecure password generator with customizable options	Secure password generator with customizable options	AGPL	91	—	—
AI ExchangeOWASP/www-project-ai-security-and-privacy-guideAI Exchange: the world's AI security guide	AI Exchange: the world's AI security guide	—	88	8.3K	—
ARTEXAutumn-27/ARTEXLLM 驱动的自主渗透测试系统控制台	LLM 驱动的自主渗透测试系统控制台	MIT	78	40.4K	—
Z3r0yv1ing/Z3r0Red Team, Penetration testing, Cybersecurity Agents	Red Team, Penetration testing, Cybersecurity Agents	—	63	—	—
SSRF Proxystripe/smokescreenI often need to make a HTTP request to a user supplied URL, but I then need to protect myself from SSRF attacks, such as users supplying URL's to "localhost:3000/protected-thing" etc. SSRF Proxy is hopefully the simplest and quickest way to get protection. Currently there is just a Node SDK but I will generate other l…	I often need to make a HTTP request to a user supplied URL, but I then need to protect myself from SSRF attacks, such as users supplying URL's to "localhost:3000/protected-thing" etc. SSRF Proxy is hopefully the simplest and quickest way to get protection. Currently there is just a Node SDK but I will generate other l…	MIT	62	—	—
DarkmoonASCIT31/Dark-MoonAutonomous, continuous penetration testing	Autonomous, continuous penetration testing	GPL	61	<5K	—
GixyMegaManSec/Gixy-NextGixy-Next: NGINX Configuration Security Scanner for Security Audits	Gixy-Next: NGINX Configuration Security Scanner for Security Audits	MPL	55	<5K	—
VICE PlatformCOSSWebba-Creative-Technologies/viceTest the security of the websites, APIs and applications you put online.	Test the security of the websites, APIs and applications you put online.	MIT	50	—	$8/mo
open-pdf-signopen-pdf-sign/open-pdf-signSign PDF files digitally from CLI or your webserver	Sign PDF files digitally from CLI or your webserver	—	46	<5K	—
NightingaleRAJANAGORI/NightingaleSecurity testing at engineering speed	Security testing at engineering speed	GPL	45	—	—
phpBoltCOSSarshidkv12/phpBoltProtect PHP Source Code	Protect PHP Source Code	—	43	<5K	$59/mo
haspMCPgethasp/haspHand the agent the keys.Without actually handing it the keys.	Hand the agent the keys.Without actually handing it the keys.		43	—	—
KrittCOSSKritt-ai/open-krittFind vulnerabilities thatsurvive review.	Find vulnerabilities thatsurvive review.	AGPL	38	<5K	$5,000/mo

Page 2 · Showing 30 of 91 open-source projects

Open Source Products & Repositories