Bandit : Bandit is a tool designed to find common security issues in Python code. To do this Bandit processes each file, builds an AST from it, and runs approp...
BlackBox : Safely store secrets in a VCS repo (i.e. Git, Mercurial, Subversion or Perforce).
vicnum : A flexible web app showing vulnerabilities such as cross site scripting, sql injections, and session management issues. Helpful to IT auditors honing ...
domsnitch : A passive reconnaissance tool inside the DOM (experimental)
A proposed standard which allows websites to define security policies.