infisicalInfisical/infisical
Open-source secrets, certificate, and privileged access platformPersonalEnterpriseDeveloper toolsInfra & DevOpsSecurity & identityWeb★ 30kcommit yesterdaylive demo79worth
Open-source alternatives to gosec
12 projects in the catalog share a category with gosec (Developer tools or Security & identity). They are ranked by how closely their categories, platforms and GitHub topics match, then by worth score. Of these, 9 run with Docker, 8 have a permissive license and 12 had a commit in the last 90 days.
Compare at a glance
| Project | Type | Self-host with Docker | License | Stars | Last commit |
|---|---|---|---|---|---|
| gosec (this project) | Docker / self-host, CLI, Library / SDK | Yes | Apache-2.0 | 9k | |
| infisical | Web, Docker / self-host, CLI | Yes | Custom (read before use) | 30k | |
| Shannon | Docker / self-host, CLI | Yes | AGPL-3.0 | 51k | |
| Ruff | CLI | Not listed | MIT | 50k | |
| AFLplusplus | Docker / self-host, CLI | Yes | AGPL-3.0 | 6.8k | |
| Trivy | Docker / self-host, CLI | Yes | Apache-2.0 | 39k | |
| RustScan | Docker / self-host, CLI | Yes | GPL-3.0 | 21k | |
| mitmproxy | Web, CLI | Not listed | MIT | 47k | |
| Strix | Docker / self-host, CLI | Yes | Apache-2.0 | 73k | |
| pentagi | Web, Docker / self-host, CLI | Yes | MIT | 33k | |
| Gitleaks | CLI | Not listed | MIT | 31k | |
| Web Check | Web, Docker / self-host | Yes | MIT | 35k | |
| ecapture | Docker / self-host, Mobile, CLI | Yes | Apache-2.0 | 16k |
Self-hosted Docker apps (9)
ShannonKeygraphHQ/shannon
AI pentester for your web apps and APIsEnterpriseAgents & frameworksSecurity & identityDocker / self-hostCLI★ 51k+6k / 90dAGPL-3.0commit 5 days ago89worth
AFLplusplusAFLplusplus/AFLplusplus
State-of-the-art coverage-guided fuzzer based on AFLPersonalEnterpriseDeveloper toolsSecurity & identityDocker / self-hostCLI★ 6.8kAGPL-3.0commit 2 weeks ago78worth
Trivyaquasecurity/trivy
Find vulnerabilities, misconfigurations and secretsEnterpriseSecurity & identityDocker / self-hostCLI★ 39k+2.1k / 90dApache-2.0commit 2 days ago87worth
RustScanbee-san/RustScan
Modern, fast port scannerPersonalEnterpriseSecurity & identityDocker / self-hostCLI★ 21k+490 / 90dGPL-3.0commit 4 weeks ago63worth
Strixusestrix/strix
AI agents that pentest your own appsPersonalEnterpriseAgents & frameworksSecurity & identityDocker / self-hostCLI★ 73k+21k / 90dApache-2.0commit 3 days ago90worth
pentagivxcontrol/pentagi
Autonomous multi-agent penetration testing systemPersonalEnterpriseAgents & frameworksAutomationSecurity & identityWeb★ 33kMITcommit last week81worth
Web Checklissy93/web-check
All-in-one website analysisPersonalSecurity & identityWebDocker / self-host★ 35k+1k / 90dMITcommit yesterday84worth
ecapturegojue/ecapture
Capture plaintext SSL/TLS traffic with eBPF without a CA proxyPersonalEnterpriseDeveloper toolsSecurity & identityDocker / self-hostMobile★ 16kApache-2.0commit 22 hours ago78worth
Command-line tools (3)
Ruffastral-sh/ruff
Extremely fast Python linter and formatterPersonalEnterpriseDeveloper toolsCLI★ 50k+1.4k / 90dMITcommit 23 hours ago85worth
mitmproxymitmproxy/mitmproxy
Interactive TLS-capable intercepting proxyPersonalEnterpriseDeveloper toolsSecurity & identityWebCLI★ 47k+3.7k / 90dMITcommit 2 days ago88worth
Gitleaksgitleaks/gitleaks
Find secrets in codePersonalEnterpriseSecurity & identityCLI★ 31k+2.8k / 90dMITcommit last week85worth