How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.
The main features of microsoft/attacksurfaceanalyzer are: Vulnerability Scanning and Auditing.
Open-source alternatives to microsoft/attacksurfaceanalyzer include: gitguardian/ggshield — Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action,… gitguardian/ggshield-action. j3ssie/osmedeus — Osmedeus is a security workflow orchestration engine that coordinates AI agents, shell commands, and scanning tools… owasp/nettacker — Nettacker is an automated penetration testing framework designed to orchestrate reconnaissance, port scanning, and… prowler-cloud/prowler — Prowler is an automated cloud infrastructure security scanner and posture management tool. It evaluates cloud… bishopfox/sliver — Sliver is a command and control framework designed for adversary emulation and security assessment operations. It…
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
Osmedeus is a security workflow orchestration engine that coordinates AI agents, shell commands, and scanning tools through declarative YAML pipelines. It functions as a distributed security scanner, a declarative workflow automator, and an AI agent framework for security, enabling automated multi-step security analysis with conditional branching, parallel execution, and distributed workers. The engine distinguishes itself through a hybrid runner model that executes workflow steps on the local host, inside Docker containers, or over SSH to remote machines, selected per step or module. It supp
Sliver is a command and control framework designed for adversary emulation and security assessment operations. It provides a centralized platform for managing remote systems, enabling security professionals to coordinate multi-operator sessions and maintain persistent, secure communication channels across diverse network environments. The framework distinguishes itself through its focus on stealth and infrastructure flexibility. It utilizes dynamic payload obfuscation to generate unique binaries and supports in-memory execution to minimize disk artifacts. Communication is secured through mutu