Search Results for "software audit"
Sort By:
Showing 107 open source projects for "software audit"
View related business solutions-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
1
security-audit
A coding-agent skill for multi-phase security audits
security-audit is a coding-agent skill for running structured security audits on software repositories. It organizes the audit into multiple phases so the agent does not simply search randomly for vulnerabilities. The workflow begins with reconnaissance, then moves into parallel hunting across attack classes such as injection, access control, business logic, cryptography, feature abuse, and chained attacks. -
2
Laravel Auditing
Record the change log from models in Laravel
This package will help you understand changes in your Eloquent models, by providing information about possible discrepancies and anomalies that could indicate business concerns or suspect activities. Laravel Auditing allows you to keep a history of model changes by simply using a trait. Retrieving the audited data is straightforward, making it possible to display it in various ways. Auditing events provide a simple observer pattern implementation, allowing you to subscribe and listen to the... -
3
Yearning SQL
A most popular sql audit platform for mysql
The MYSQL SQL audit tool used to unpack. Using the compiled binary files, only one database does not rely on any other plug-in to easily deploy. go+vue brings a smooth and beautiful user interface and powerful performance to Yearning. Yearning automatically reviews Mysql's syntax grammar norms based on Mysql grammar analysis and conducts functional audits based on the audit rules implemented by Yearning itself. -
4
string-audit
Dennis is a deterministic knowledge preserving and codemod tool
Dennis is an open-source artifact lifecycle and knowledge preservation engine designed to make software projects portable, reproducible, and verifiable. Instead of treating source code, documentation, configuration, and metadata as disconnected files, Dennis packages them into deterministic DEX (Dennis Exchange) artifacts that can be signed, verified, compared, versioned, and shared across teams and organizations. Built around the principles of reproducibility, integrity, and long-term... -
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
5
Netcap
A framework for secure and scalable network traffic analysis
The Netcap (NETwork CAPture) framework efficiently converts a stream of network packets into platform-neutral type-safe structured audit records that represent specific protocols or custom abstractions. These audit records can be stored on disk or exchanged over the network, and are well-suited as a data source for machine learning algorithms. Since parsing of untrusted input can be dangerous and network data is potentially malicious, a programming language that provides a garbage-collected... -
6
JumpServer
Manage assets on different clouds at the same time
The JumpServer bastion machine complies with the 4A specification of operation and maintenance security audit. Zero threshold, fast online acquisition and installation. Just a browser, the ultimate Web Terminal experience. Easily support massive concurrent access. One system manages assets on different clouds at the same time. Audit recordings are stored in the cloud and will never be lost. One system, is used by multiple subsidiaries and departments at the same time. Prevent identity fraud... -
7
eCapture
Capturing SSL/TLS plaintext without a CA certificate using eBPF
Capture SSL/TLS text content without a CA certificate using eBPF. Supports Linux/Android kernel versions x86_64 4.18 and above, aarch64 5.5 and above. Does not support Windows and macOS systems. -
8
Gatekeeper
Policy Controller for Kubernetes
A customizable cloud-native policy controller that helps enforce policies and strengthen governance. Gatekeeper makes managing policies on top of Kubernetes easy. Policies can be enforced at admission time or at runtime via the audit functionality. Gatekeeper is powered by the Open Policy Agent (OPA) project. Using OPA allows you to write policies that are powerful, flexible, and portable. Browse the policy library to find existing policies that fit your use case. Each policy in the library... -
9
SikuliX
Now continued as OculiX — see oculix.org
SikuliX is now continued as OculiX at https://oculix.org. The active development,,releases, documentation and community have moved there. SikuliX (and now OculiX) automates anything you see on the screen of your desktop computer. Running Windows, Mac or some Linux/Unix. It uses image recognition powered by OpenCV to identify GUI components and can act on them with mouse and keyboard actions. This is handy in cases when there is no easy access to a GUI's internals or the source... -
99.99% Uptime for MySQL and PostgreSQL DatabasesCloud SQL Enterprise Plus delivers near-zero downtime with 35 days of point-in-time recovery. Supports MySQL, PostgreSQL, and SQL Server.
-
10
Loop Engineering
Practical patterns, starters & CLI tools for loop engineering with AI
Loop Engineering is a practical reference repository for designing loop-based workflows with AI coding agents. It focuses on replacing repeated manual prompting with systems that prompt, verify, schedule, and hand off work over time. The project is aimed at developers using tools such as Grok, Claude Code, Codex, Cursor, and other coding agents. It explains core building blocks such as scheduling, worktrees, skills, plugins, connectors, sub-agents, and persistent memory or state. The... -
11
Interface Design
Design engineering for Claude Code
Interface Design is a Claude Code plugin and design-engineering toolkit that helps developers and designers retain consistent UI design decisions across sessions by codifying design principles and remembering them for future use. It’s built around the idea that when building UI (dashboards, apps, admin panels), design decisions like spacing, colors, depth, and component patterns can drift over time, so Interface-Design captures and stores those decisions in a system MD file that’s loaded... -
12
Sudo
Utility to execute a command as another user
Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done. Before building sudo, make sure you have the current version. The latest sudo may always be gotten via anonymous ftp from ftp.sudo.ws in the directory /pub/sudo/ or from the sudo website. -
13
kubeaudit
kubeaudit helps you audit your Kubernetes clusters
kubeaudit helps you audit your Kubernetes clusters against common security controls. -
14
Quint Code
Structured reasoning framework for Claude Code, Gemini, and Cursor
...It supports a cycle of abduction, deduction, and induction backed by CLI commands (like /q1-hypothesize, /q2-verify, /q3-validate, etc.) that create a persisting audit trail in a .quint/ directory. -
15
Commanded
Use Commanded to build Elixir CQRS/ES applications
Commanded is an Elixir framework for implementing CQRS (Command Query Responsibility Segregation) and Event Sourcing patterns. It provides domain-driven design tools—aggregates, commands, events, and projections—backed by an event store (e.g. PostgreSQL). -
16
agentmemory
#1 Persistent memory for AI coding agents
...It combines keyword search, vector search, confidence scoring, lifecycle management, and knowledge graph querying to retrieve useful memories without overloading the context window. The project also includes hooks, an API, import and export support, audit trails, and team sharing workflows. Overall, agentmemory is designed to make AI coding assistants more continuous, context-aware, and useful across long-running software projects. -
17
Gradle License Plugin
Gradle plugin that provides a task to generate a HTML license report
The Gradle License Plugin helps developers manage and audit software licenses for dependencies in Android and Java projects. It automatically detects third-party libraries and generates a report containing license details. This is particularly useful for ensuring compliance with open-source licenses, making it easier for teams to identify potential legal issues or attribution requirements before releasing software. -
18
Tesseral
Open source auth infrastructure for B2B SaaS
Tesseral is an open-source authentication and identity management platform tailored for B2B SaaS applications, offering enterprise-grade features like SAML SSO, SCIM provisioning, RBAC, API key management, and audit logging through a unified API-first service. Tesseral is a multi-tenant, API-first service designed to run on the cloud. It is not an authentication library tied to a particular language or framework; Tesseral works with any tech stack. Tesseral is open source auth infrastructure for business software (i.e., B2B SaaS). Tesseral is built for B2B SaaS. ... -
19
go-critic
The most opinionated Go source code linter for code audit
The most opinionated Go source code linter. go-critic is a collection of checks that detect style, and performance issues as well as some common programming errors. We provide as many useful checks as possible. We’re prototyping and experimenting here. When specific check implementation is mature and proven useful, propose it’s integration into other linter. If a good checker can’t find a better home, it stays here. Almost 100 diagnostics that check for bugs, performance and style issues.... -
20
Atlantis
Terraform Pull Request Automation
Bring the benefits of code review to your operations workflow. Catch errors in the Terraform plan output before it's applied. Ensure that you apply changes before merging to main. Put the Dev back into DevOps. Empower your developers to write Terraform. Safely. Developers can submit Terraform pull requests without needing credentials. Operators can require approvals prior to allowing an apply. Instant Audit Logs And Compliance. Pass audits without compromising your workflow. Each pull... -
21
ContainerSSH
ContainerSSH: Launch containers on demand
An SSH Server that Launches Containers in Kubernetes and Docker. Building a lab environment can be time-consuming. ContainerSSH solves this by providing dynamic SSH access with APIs, automatic cleanup on logout using ephemeral containers, and persistent volumes for storing data. Perfect for vendor and student labs. Provide production access to your developers, give them their usual tools while logging all changes. Authorize their access and create short-lived credentials for the database... -
22
Logbook
An extensible Java library for HTTP request and response logging
Logbook is an extensible Java library to enable complete request and response logging for different client- and server-side technologies. It satisfies a special need by a) allowing web application developers to log any HTTP traffic that an application receives or sends b) in a way that makes it easy to persist and analyze it later. This can be useful for traditional log analysis, meeting audit requirements or investigating individual historic traffic issues. Logbook is ready to use out of... -
23
Datacap
DataCap is integrated software for data transformation
Datacap is an open-source data catalog and governance tool that helps organizations manage and document their data assets. It provides metadata management, lineage tracking, and collaboration features to ensure data transparency and quality. Datacap is designed for teams that need a lightweight, self-hosted solution to organize and govern their data ecosystems. -
24
ORG-2
Open-source Cursor-style agent IDE
...Overall, it is an experimental environment for teams and builders who want AI coding agents to be easier to audit, schedule, supervise, and align with human goals. -
25
BoxyHQ Enterprise SaaS Starter Kit
Kickstart your enterprise app development with the Next.js SaaS
Enterprise-ready SaaS Starter Kit is a Next.js-based SaaS Starter Kit that can save hundreds of development hours while building enterprise-ready SaaS apps. Kickstart your enterprise app development with Next.js SaaS Starter Kit.
