* [ owasp-threat-dragon-desktop ](https://github.com/mike-goodwin/owasp-threat-dragon-desktop) \- Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. 
  * [ launch_ros_sandbox ](https://github.com/ros-tooling/launch_ros_sandbox) \- Can define launch files running nodes in restrained environments, such as Docker containers or separate user accounts with limited privileges. 
  * [ wolfssl ](https://github.com/wolfSSL/wolfssl) \- A small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. 
  * [ CANalyzat0r ](https://github.com/schutzwerk/CANalyzat0r) \- Security analysis toolkit for proprietary car protocols. 
  * [ RSF ](https://github.com/aliasrobotics/RSF) \- Robot Security Framework (RSF) is a standardized methodology to perform security assessments in robotics. 
  * [ How-to-Secure-A-Linux-Server ](https://github.com/imthenachoman/How-To-Secure-A-Linux-Server) \- An evolving how-to guide for securing a Linux server. 
  * [ lynis ](https://github.com/CISOfy/lynis) \- Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. 
  * [ OpenVPN ](https://github.com/OpenVPN/openvpn) \- An open source VPN daemon. 
  * [ openfortivpn ](https://github.com/adrienverge/openfortivpn) \- A client for PPP+SSL VPN tunnel services and compatible with Fortinet VPNs. 
  * [ WireGuard ](https://github.com/WireGuard/WireGuard) \- WireGuard is a novel VPN that runs inside the Linux Kernel and utilizes state-of-the-art cryptography. 
  * [ ssh-auditor ](https://github.com/ncsa/ssh-auditor) \- Scans for weak ssh passwords on your network. 
  * [ vulscan ](https://github.com/scipag/vulscan) \- Advanced vulnerability scanning with Nmap NSE. 
  * [ nmap-vulners ](https://github.com/vulnersCom/nmap-vulners) \- NSE script based on Vulners.com API. 
  * [ brutespray ](https://github.com/x90skysn3k/brutespray) \- Automatically attempts default creds on found services. 
  * [ fail2ban ](https://github.com/fail2ban/fail2ban) \- Daemon to ban hosts that cause multiple authentication errors. 
  * [ DependencyCheck ](https://github.com/jeremylong/DependencyCheck) \- A software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies. 
  * [ Firejail ](https://github.com/netblue30/firejail) \- A SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces, seccomp-bpf and Linux capabilities. 
  * [ RVD ](https://github.com/aliasrobotics/RVD) \- Robot Vulnerability Database. Community-contributed archive of robot vulnerabilities and weaknesses. 
  * [ ros2_dds_security ](http://design.ros2.org/articles/ros2_dds_security.html) \- Adding security enhancements by defining a Service Plugin Interface (SPI) architecture, a set of builtin implementations of the SPIs, and the security model enforced by the SPIs. 
  * [ Security-Enhanced Linux ](https://github.com/SELinuxProject/selinux) \- A Linux kernel security module that provides a mechanism for supporting access control security policies, including mandatory access controls (MAC). 
  * [ OpenTitan ](https://github.com/lowRISC/opentitan) \- Will make the silicon Root of Trust design and implementation more transparent, trustworthy, and secure for enterprises, platform providers, and chip manufacturers. OpenTitan is administered by lowRISC CIC as a collaborative project to produce high quality, open IP for instantiation as a full-featured product. 
  * [ bandit ](https://github.com/PyCQA/bandit) \- A tool designed to find common security issues in Python code. 
  * [ hardening ](https://github.com/konstruktoid/hardening) \- A quick way to make a Ubuntu server a bit more secure. 
  * [ Passbolt ](https://github.com/passbolt/passbolt_docker) \- Passbolt is a free and open source password manager that allows team members to store and share credentials securely. 
  * [ gopass ](https://github.com/gopasspw/gopass) \- A password manager for the command line written in Go. 
  * [ pass ](https://www.passwordstore.org/) \- The standard unix password manager. 
  * [ Vault ](https://github.com/hashicorp/vault) \- A tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more. 
  * [ legion ](https://github.com/GoVanguard/legion) \- An open source, easy-to-use, super-extensible and semi-automated network penetration testing framework that aids in discovery, reconnaissance and exploitation of information systems. 
  * [ openscap ](https://github.com/OpenSCAP/openscap) \- The oscap program is a command line tool that allows users to load, scan, validate, edit, and export SCAP documents.