devsecops — independent software & tools

7 independent devsecops listings the big search engines bury.

• niro

  github · Free · by apxlabs-ai

  Security that keeps up with your developers.

• pentest-with-LLM

  github · Free · by miraunreformable550

  Automate authorized pentesting with LLMs, combining scanning, RAG, and exploit research for faster target analysis, vuln discovery, and reporting

• AttackMap

  github · Free · by mlaify

  AI-assisted defensive security analysis for codebases.

• diffgate

  github · Free · by srbsa

  Triage for AI-generated code review: grades each changed diff line green/yellow/orange by impact, so reviewers spend attention where it matters. High-signal, low-noise (0 false blocks), deterministic — in your coding agent (MCP), editor (VS Code), and CLI/CI.

• pinprick

  github · Free · by starhaven-io

  Pin your GitHub Actions. Prick holes in their supply chain security.

• trusca

  github · Free · by trustedoss

  Self-hosted, open-source SCA portal — vulnerability (CVE), license compliance, and SBOM management in one UI. Black Duck/Snyk-class capabilities, Apache-2.0.

• agent-bom

  github · Free · by msaad00

  AI supply-chain & cloud security scanner and self-hosted control plane — agents, MCP, packages, cloud estate, non-human identities, and LLM cost. SBOM/SARIF, graph attack-paths, runtime enforcement, and compliance evidence.