Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayBackend project contains source code of backend with all plugin integrations writer in Spring Boot.

Burp Extension for collaboration in Faraday

An enterprise-grade Fortify Software Security Center (OpenText Application Security) plugin to ingest, parse, and visualize PortSwigger Burp Suite XML scan results.

Automate the boring stuff

Config-aware Linux kernel CVE analyzer plugin for OWASP Dependency-Track v5

Self-hosted vulnerability management for Kubernetes workloads

This repository contains a backend using Spring Boot, JPA, and H2 to manage and display over 10,000 CVE records. It fetches CVE data from a public source, stores it in H2, and provides custom endpoints with filtering by year, metric score, and last modified date. Built with MVC architecture for structured data handling and web page integration.

Deliberately insecure demo fixture for Tracehelm Coverage — synthetic auth-bypass case TH-COV-2026-0001 across six release branches. Fictional; do not deploy or reuse.

Run Cyber Chief API security, web app security & CSPM security tests from Jenkins

SecuSphere Jenkins Plugin

An autonomous AI security supervisor built with Java 21 and LangChain4j. Orchestrates polyglot security analysis using Semgrep for SAST and OWASP ZAP for DAST to audit GitHub repositories.

VulDB Java code to fetch data via API

Full-stack vulnerability intelligence, asset inventory, and remediation-priority dashboard.

Open-source Software Watchlist — self-hosted SCA platform for CVE & license risk tracking