DockSec is an OWASP Lab Project that bridges the gap between complex Docker security scan results and actionable fixes.

OWASP CVE Lite CLI is a fast, open source dependency vulnerability scanner for JavaScript and TypeScript projects.

oproxy is an open-source local proxy server for inspecting, replaying, and modifying HTTP, HTTPS, and SOCKS5 traffic. Built in Rust with a JavaScript frontend, it supports request breakpoints, traffic rules, Lua scripting, mock responses, DNS overrides, and an AI assistant via any OpenAI-compatible model.

If you’re testing APIs and want to stay away from cloud-synced tools, Bruno is worth a look - an open-source client that stores collections as plain files on disk instead of locking them into an account.

Caido has released its latest version, 0.57.1. Built entirely in Rust, the tool continues to position itself as a compelling alternative to solutions like Burp Suite and OWASP ZAP.

UPDATE

v2026.7.3 is out:

## What's Changed
* Fix: AI-only analysis now writes a report instead of pointing to nonexistent files by @advaitpatel in https://github.com/OWASP/DockSec/pull/134
* Fix LLM-init crash, modernize HTML report, and expand comparison table by @advaitpatel in https://github.com/OWASP/DockSec/pull/137
* Add SBOM export, offline mode, install-skill, and fix-command output by @advaitpatel in https://github.com/OWASP/DockSec/pull/138

**Full Changelog**: https://github.com/OWASP/DockSec/compare/v2026.7.2...v2026.7.3

Full release notes: github.com/OWASP/DockSec/releases/tag/v2026.7.3

Wazuh is an open-source security platform that delivers combined XDR and SIEM functionality to safeguard endpoints and cloud workloads.

Bruno is an open-source API client for exploring and testing APIs - a privacy-focused alternative to Postman and Insomnia that stores collections directly as files on disk.

UPDATE

Opengrep v1.25.0 is out with several Dart translation fixes and a PHP lexer fix.