appsec — independent software & tools

7 independent appsec listings the big search engines bury.

• Aivist-Verify

  github · Free · by Aivist

  A BOLA/IDOR access-control confirmation engine — code adjudicates every verdict, not just the model, with a reproducible evidence chain.

• Velonus

  github · Free · by AliAmmar15

  AI-native security copilot for Python developers. Scans for secrets, vulnerabilities, and dependency CVEs — then tells you how to fix them.

• draugr

  github · Free · by draugr-dev

  Developer-first security scanning orchestration — describe your app in one file, run many scanners (SAST, SCA, secrets, IaC, containers, headers), get one SARIF verdict for CI & code scanning.

• triagekit

  github · Free · by patrick204nqh

  Backend-free repo triage in one self-contained HTML file — GitHub Dependabot alerts, code scanning, PRs & issues, scored and tiered. No server, no CDN; your token stays in the browser.

• pinprick

  github · Free · by starhaven-io

  Pin your GitHub Actions. Prick holes in their supply chain security.

• pypi-security-best-practices

  github · Free · by tildaknifelike3834

  Secure your Python supply chain with this curated list of best practices for safe package installation, vulnerability scanning, and dependency management.

• entropy-chaos

  github · Free · by ishika-0101

  Test APIs by generating custom attack scenarios using large language models to uncover logic flaws beyond standard scanners.