#Audit
Showing 60 of 130 repositories tagged #audit, ranked by stars
Automated auditing, performance metrics, and best practices for the web.
The easiest, and most secure way to access and protect all of your infrastructure.
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
Amphion (/æmˈfaɪən/) is a toolkit for Audio, Music, and Speech Generation. Its purpose is to support reproducible research and help junior researchers and engineers get started in the field of audio, music, and speech generation research and development.
WiFi security auditing tools suite
Enable Self-Service Operations: Give specific users access to your existing tools, services, and scripts
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
Web Application Security Scanner Framework
Validation of best practices in your Kubernetes clusters
A collection of custom security tools for quick needs.
InSpec: Auditing and Testing Framework
Pentest Report Generator
HardeningKitty and Windows Hardening Settings
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
kubeaudit helps you audit your Kubernetes clusters against common security controls
🚀 Try the Learn EVM Explorer we just launched!!!
HardeningKitty - Checks and hardens your Windows configuration
ssh rdp vnc telnet sftp bastion/jump web putty xshell terminal jumpserver audit realtime monitor rz/sz 堡垒机 云桌面 linux devops sftp websocket file management rz/sz otp 自动化运维 审计 录像 文件管理 sftp上传 实时监控 录像回放 网页版rz/sz上传下载/动态口令 django
AI Native platform to get companies compliant - Vanta & Drata Alternative
📱⚡️ Lighthouse for Mobile - audits your app and gives a performance score to your Android apps (native, React Native, Flutter..). Measure performance on CLI, E2E tests, CI...
Autogenerate RBAC policies based on Kubernetes audit logs
Curated list of resources for security Governance, Risk Management, Compliance and Audit professionals and enthusiasts (if they exist).
Idiomatic nmap library for go developers
PCI-DSS compliant Debian 11/12 hardening
Your performance & security consultant, an artisan command away.
记录自己对《代码审计》的理解和总结,对危险函数的深入分析以及在p牛的博客和代码审计圈的收获
Enterprise-oriented Generic Proxy Solutions
DevSec Linux Baseline - InSpec Profile
A checklist of things to look for when auditing Solidity smart contracts.
Certified Smart Contract Audits for Ethereum, Solana, Near, Cardano, Aptos, Sui, Binance Smart Chain, Fantom, EOS, Tezos and more
opensecurity: open-source security and compliance. See and secure your cloud, containers, code, networks, deployments, devices. Define your rules, get precise checks, fix gaps fast. Streamlined audits. No fluff.
Pretty CSS analytics on the CLI
A collection of resources to help you build better and more secure Solana programs. Kept up to date.
Smart Contract security audit reports
A powerful scanner to scan your Filesystem, S3, MySQL, Redis, Google Cloud Storage and Firebase storage for PII and sensitive data.
Security & License Compliance For Your App's Dependencies 🪱
Pentest Report Generator
Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location.
A benchmark and harness for finding and exploiting smart contract bugs
Socially scalable Code REView and recommendation system that we desperately need. See http://github.com/crev-dev/cargo-crev for real implemenation.
Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting.
List of the most common French passwords
《PHP代码审计入门指南》 这本指南包含了我在学习PHP代码审计过程中整理出的一些技巧和对漏洞的一些理解
Kexa's simple rules (Open Source) make it easy to monitoring and manage alerting of your entire cloud. With various monitoring and alerting options, instant and detailed alerts, easy-to-deploy and low in infrastructure costs, in turns complexity into simplicity.
Gaining the most elusive of tips. Add your input and let's collect them all!
:owl::mag_right: A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration
A curated list of smart contracts security audits checklists and resources.
Autonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.
Website auditing tool built for your agent and llm workflow.
Static analyzer for solidity contracts based on regexs specifically crafted for code4rena contests
Linux Process Discovery. C Library, Go bindings, Runtime.
Runs the default Google Lighthouse tests with additional security tests
Audits performed by Solidified
🛡️ GitHub Action for security audits
Run Lighthouse analysis over multiple sites in a single command
The switchboard for the agent era. Per-channel isolation, encrypted credential vault, per-session hash-chained audit log. Single static Rust binary.
A collection of common security issues and possible gas optimizations in solidity smart contracts
Vulnerable-by-design solidity protocol to help Web3 security enthusiasts practice their skills in an environment closer to real live.