SecObserve — SecObserve is an open source vulnerability and license management system for software development teams and cloud environments. It supports a variety of open source vulnerability scanners and integrates easily into CI/CD pipelines.

cve-bin-tool — The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

UTMStack — Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

certificates — 🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

aws-sso-cli — A powerful tool for using AWS Identity Center for the CLI and web console.

smokedmeat — A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.