Category

Osmedeus is a workflow engine for offensive security, designed to build customizable reconnaissance systems for large-scale targets.

Automated mobile app security platform providing SAST, DAST, and AI-driven triage for Android and iOS vulnerabilities with actionable exploit proofs.

A comprehensive collection of payloads and bypasses for web application security testing and exploitation.

A Chrome MV3 extension that passively maps every endpoint, secret, hidden field, and route on any website, with optional active probing for vulnerabilities.

Autonomous AI agent system for complex penetration testing, integrating security tools, long-term memory, and smart task delegation in sandboxed Docker.

Postman: The leading API platform for building and using APIs. Streamline collaboration and simplify the API lifecycle.

Probely is an automated web application and API vulnerability scanner designed for agile teams to automate security testing in their SDLC.

ProjectDiscovery offers real-time vulnerability detection, asset discovery, and customizable exploit detection for streamlined security workflows.

ProxyOrb offers a free web proxy and online proxy browser for secure, anonymous access to blocked websites, featuring military-grade encryption.

Qualys SSL Labs provides a free online service to perform deep analysis of the configuration of any SSL web server on the public Internet.

Autonomous security research framework that turns Claude Code into an agent for adversarial code analysis, fuzzing, and exploit generation.

Retire.js: Scans web/Node.js apps for vulnerable JS libraries & generates SBOMs, aiding in identifying & mitigating security risks.