usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
// category
Security
Offensive and defensive security tooling: pentesting, vulnerability research, fuzzing, and application security.
These are our picks, not a scrape of GitHub trending: every repo here is one we covered in Repository Radar because we thought it worth tracking. Ranked by stars, with live metrics and a get-it block on each.
4 repos in this category. Browse or filter the full archive → · Compare all categories →
// the space
4 repos, our 9th-largest category (Agents & Orchestration leads with 92). Combined they're up 84% since we covered them, 6th-fastest-growing of our 9 categories. They hold 125k stars and 613 contributors between them. Strength runs broad, not top-heavy: the median repo (29k stars) sits close to the 31k average. 2 are breaking out and 4 still actively shipping, and Go leads on language. What's pulling ahead: penetration testing and offensive security projects.
total
- 125k
- stars tracked
- #9 of 9
- +57k
- stars added since covered
- #9 of 9
- 613
- contributors
- #9 of 9
- 303
- commits / week
- #7 of 9
- 2
- breaking out
- #9 of 9
- 4
- still shipping
- #9 of 9
per repo
- 29k
- median stars
- #2 of 9
- +14k
- stars added / repo
- #7 of 9
- +84%
- growth since covered
- #6 of 9
- 153
- contributors / repo
- #5 of 9
- 76
- commits / repo
- #2 of 9
- 50%
- % breaking out
- #3 of 9
- 100%
- % shipping
- #1 of 9
projectdiscovery/nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Infisical/infisical
Infisical is the open-source platform for secrets, certificates, and privileged access management.
vxcontrol/pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks