Skip to content

Top 10 Most-Starred Security Projects on GitHub

The most popular open-source Security projects, ranked by GitHub stars.

  • Updated 38 min ago
  • 📏 Ranked by stars
  • 🔄 Refreshed every 6 hours
  • 📚 Source: GitHub
  1. morluto/rea

    Reverse engineer anything with agents, from app behavior down to native binaries.

    418.6K ★

    No change
  2. trimstray/the-book-of-secret-knowledge

    A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

    255.1K ★

    No change
  3. Hack-with-Github/Awesome-Hacking

    A collection of various awesome lists for hackers, pentesters and security researchers

    124.3K ★

    No change
  1. 4Developer-Y/cs-video-coursesList of Computer Science courses with video lectures.84.5K ★No change
  2. 5swisskyrepo/PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTF82.3K ★No change
  3. 6caddyserver/caddyFast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS78.6K ★No change
  4. 7usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.73.2K ★No change
  5. 8KeygraphHQ/shannonShannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploit50.8K ★No change
  6. 9x64dbg/x64dbgAn open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.50.1K ★No change
  7. 10mitmproxy/mitmproxyAn interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.46.5K ★No change
See the full top 50
  1. 11GyulyVGC/sniffnetComfortably monitor your network traffic 🕵️‍♂️41.8K ★No change
  2. 12The-Vibe-Company/quivrAn open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid search, alerts, and plugin39.6K ★No change
  3. 13aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more38.9K ★No change
  4. 14mukul975/Anthropic-Cybersecurity-Skills817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & M35.4K ★No change
  5. 15lissy93/web-check🕵️‍♂️ All-in-one OSINT tool for analysing any website35.3K ★No change
  6. 16OWASP/CheatSheetSeriesThe OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.33.8K ★No change
  7. 17projectdiscovery/nucleiNuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling32.5K ★No change
  8. 18nginx/nginxThe official NGINX Open Source repository.32K ★No change
  9. 19imthenachoman/How-To-Secure-A-Linux-ServerAn evolving how-to guide for securing a Linux server.32K ★No change
  10. 20StevenBlack/hosts🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other c31.4K ★No change
  11. 21gitleaks/gitleaksFind secrets with Gitleaks 🔑30.6K ★No change
  12. 22trailofbits/algoSet up a personal VPN in the cloud30.5K ★No change
  13. 23Infisical/infisicalInfisical is the open-source platform for securing secrets, certificates, access, and AI Agents.30.2K ★No change
  14. 24community-scripts/ProxmoxVEProxmox VE Helper-Scripts (Community Edition) 30K ★No change
  15. 25keepassxreboot/keepassxcKeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.29.7K ★No change
  16. 26authelia/autheliaThe Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.29.5K ★No change
  17. 27hwdsl2/setup-ipsec-vpnSet up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu, Debian, CentOS/RHEL, Alpine28.9K ★No change
  18. 28trufflesecurity/trufflehogFind, verify, and analyze leaked credentials28.8K ★No change
  19. 29digitalocean/nginxconfig.io⚙️ NGINX config generator on steroids 💉28.3K ★No change
  20. 30OpenZeppelin/openzeppelin-contractsOpenZeppelin Contracts is a library for secure smart contract development.27.3K ★No change
  21. 31goauthentik/authentikThe authentication glue you need.26.2K ★No change
  22. 32cilium/ciliumeBPF-based Networking, Security, and Observability25.8K ★No change
  23. 33radareorg/radare2UNIX-like reverse engineering framework and command-line toolset25.2K ★No change
  24. 34TecharoHQ/anubisWeighs the soul of incoming HTTP requests to stop AI crawlers23.9K ★No change
  25. 35osquery/osquerySQL powered operating system instrumentation, monitoring, and analytics.23.7K ★No change
  26. 36getsops/sopsSimple and flexible tool for managing secrets23.6K ★No change
  27. 37slimtoolkit/slimSlim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it sec23.5K ★No change
  28. 38shieldfy/API-Security-ChecklistChecklist of the most important security countermeasures when designing, testing, and releasing your API23.3K ★No change
  29. 39chaitin/SafeLineSafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.23.1K ★No change
  30. 40lissy93/personal-security-checklist🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 202622.7K ★No change
  31. 41drduh/macOS-Security-and-Privacy-GuideCommunity guide to securing and improving privacy on macOS.22.6K ★No change
  32. 42twpayne/chezmoiManage your dotfiles across multiple diverse machines, securely.22.1K ★No change
  33. 43matomo-org/matomoEmpowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google22K ★No change
  34. 44Atlas-OS/Atlas🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.22K ★No change
  35. 45ImranR98/ObtainiumGet Android app updates straight from the source.21.1K ★No change
  36. 46FallibleInc/security-guide-for-developersSecurity Guide for Developers21.1K ★No change
  37. 47gravitational/teleportThe easiest, and most secure way to access and protect all of your infrastructure.21.1K ★No change
  38. 48bee-san/RustScan🤖 The Modern Port Scanner 🤖20.7K ★No change
  39. 49eosphoros-ai/DB-GPTopen-source agentic AI data assistant for the next generation of AI + Data products.20.2K ★No change
  40. 50bettercap/bettercapThe Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.20.2K ★No change

How this list is ranked

Repositories tagged with the GitHub topic "security", ranked by stargazer count via the GitHub search API.

Data from GitHub, refreshed every 6 hours. Arrows show how each entry moved since the previous update.

Sources