Repositories list

• AI-Surface

  Public
  Find and govern AI attack surfaces in application code at PR time. Free, OSS, runs offline.

  devopsmcpstatic-analysis+ 17

  devopsmcpstatic-analysisowaspappsecsecurity-scannersarifdevsecopsai-agentsattack-surface+ 10

  Python

  •

  MIT License

  •2020 forks•125125 stars•11 issue•22 pull requests•Updated Aug 26, 2026Aug 26, 2026

• mcp-audit

  Public
  See what your AI agents can access. Scan MCP configs for exposed secrets, shadow APIs, and AI models. Generate AI-BOMs for compliance.

  securityaimcp+ 14

  securityaimcpcursorappsecdevsecopsclaudeai-securitysbomsecrets-detection+ 7

  Python

  •

  MIT License

  •4545 forks•159159 stars•11 issue•44 pull requests•Updated Aug 18, 2026Aug 18, 2026

• apisec-relay

  Public
  A Burp Suite extension that connects APIsec.ai and Burp Suite in both directions.

  Java

  •

  Apache License 2.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated Aug 18, 2026Aug 18, 2026

• apisec-bolt-code-discovery-github-action

  Public
  MIT License

  •11 fork•2929 stars•11 issue•11 pull request•Updated Aug 18, 2026Aug 18, 2026

• llm-chat-app-template

  Public
  JavaScript

  •00 forks•00 stars•00 issues•55 pull requests•Updated Jun 20, 2026Jun 20, 2026

• apisec-examples-public

  Public
  APIsec NG Python CI/CD Examples and Scripts allows you to easily manage applications, retrieve scan data, and analyze security vulnerabilities locally or in CI/…

  Python

  •

  MIT License

  •00 forks•00 stars•00 issues•33 pull requests•Updated Jun 9, 2026Jun 9, 2026

• documentation

  Public
  APIsec product documentation

  11 fork•2626 stars•00 issues•00 pull requests•Updated Apr 5, 2026Apr 5, 2026

• daemonset-capture

  Public
  Python

  •00 forks•00 stars•00 issues•33 pull requests•Updated Mar 26, 2026Mar 26, 2026

• urban-VAmPI

  Public
  Modified for CI/CD Demo: Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

  JavaScript

  •

  MIT License

  •22 forks•11 star•00 issues•22 pull requests•Updated Mar 14, 2026Mar 14, 2026

• apisec-skills

  Public
  API security skills and rules for Cursor, Claude Code, Copilot, and all major AI coding agents. OWASP API Top 10 coverage — zero configuration.

  MIT License

  •11 fork•1818 stars•00 issues•00 pull requests•Updated Mar 12, 2026Mar 12, 2026

• apisec-scripts

  Public
  Shell

  •22 forks•22 stars•00 issues•00 pull requests•Updated Dec 12, 2025Dec 12, 2025

• crAPI

  Public
  crAPI API Details

  00 forks•22 stars•00 issues•00 pull requests•Updated Mar 14, 2025Mar 14, 2025

• SplunkIntegration

  Public
  Integrate Splunk with APIsec to push real-time logs from APIsec

  Python

  •00 forks•00 stars•00 issues•00 pull requests•Updated Dec 26, 2024Dec 26, 2024

• releases

  Public
  22 forks•2424 stars•00 issues•00 pull requests•Updated Oct 24, 2024Oct 24, 2024

• Netbanking-Specs

  Public
  00 forks•11 star•00 issues•00 pull requests•Updated Aug 14, 2024Aug 14, 2024

• starter-workflows

  Public
  Accelerating new GitHub Actions workflows

  TypeScript

  •

  Other

  •7.3k7.3k forks•00 stars•00 issues•11 pull request•Updated May 20, 2024May 20, 2024

• apisec-run-scan

  Public
  This action triggers on-demand scans for projects registered in APIsec.

  securitydevsecops

  securitydevsecops

  Shell

  •77 forks•2828 stars•11 issue•00 pull requests•Updated May 16, 2024May 16, 2024

• vapi

  Public
  vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

  HTML

  •

  GNU General Public License v3.0

  •338338 forks•11 star•00 issues•00 pull requests•Updated Mar 30, 2024Mar 30, 2024

• crAPI3

  Public
  completely ridiculous API (crAPI)

  Java

  •

  Apache License 2.0

  •639639 forks•11 star•00 issues•00 pull requests•Updated Nov 2, 2022Nov 2, 2022

• crAPI2

  Public
  completely ridiculous API (crAPI)

  Java

  •

  Apache License 2.0

  •639639 forks•00 stars•00 issues•00 pull requests•Updated Nov 2, 2022Nov 2, 2022