Runtz

This open-source DevSecOps platform provides extensive security scanning for software development workflows by enabling teams to perform dependency, container, and host vulnerability assessments locally using command-line interfaces, dashboards, and containerized environments. Its key features include support for automated security scans of npm packages, Linux host systems, Debian and Ubuntu images, with plans to expand to static application security testing (SAST), dynamic application security testing (DAST), and Kubernetes posture analysis, solving problems related to identifying security vulnerabilities early in the development process and maintaining control over sensitive data within private environments. It is designed for security engineers, DevOps teams, and software developers who seek an integrated, customizable, and transparent security testing solution that can be deployed, extended, and inspected directly within their own.

Runtz can be found in Application Security Testing (SAST/DAST) categories.