Research Tools & Projects

Research-Driven
Security Tools.

Explore open-source contributions and research projects from OPSWAT Unit 515, spanning security reconnaissance, vulnerability analysis, and AI-assisted security testing.

Open source

Open-Source Security Tools

Explore open-source security tools developed or contributed to by Unit 515 researchers.

GoSpider

Created by Unit 515

High-Performance Web Crawler for Security Reconnaissance

GoSpider is an open-source web crawler designed to automate web reconnaissance, discover endpoints, and extract relevant information from web applications.

  • Concurrent crawling with depth control
  • JS, sitemap and robots.txt parsing
  • Subdomain and AWS S3 bucket extraction
Language
Go
License
MIT
GitHub stars
2K+
jaeles-project/gospider

Osmedeus

Unit 515 contributors

Security Reconnaissance and Workflow Orchestration

Osmedeus is an open-source security orchestration framework that automates reconnaissance and security assessment workflows, with contributions from Unit 515 researchers.

  • Declarative YAML workflows
  • Distributed scanning
  • Integrates 50+ tools
Language
Go
License
MIT
GitHub stars
6K+
j3ssie/osmedeus

PromptX-515

Created by Unit 515Coming soon

Prompt Injection Security Testing for AI Applications

PromptX-515 is an AI security testing framework developed by OPSWAT Unit 515 to support structured, repeatable prompt injection assessments of LLM-powered applications and AI agents.

  • Direct and indirect payload library
  • Tests chat, files, RAG sources and tool outputs
  • Retest mode to verify mitigations
Status
Coming soon
Release
Open source
Repository coming soon

In development

Research Projects in Development

Ongoing research initiatives exploring AI-assisted source code analysis, penetration testing automation, and security assessment workflows.

Internal Beta

515 CodeAudit AI

AI-Assisted Source Code Vulnerability Analysis

Currently used by Unit 515 researchers in internal assessments.

An AI-assisted security research initiative combining automated code analysis and vulnerability investigation to identify potential security weaknesses, with findings subject to expert validation.

  • LLM-guided source-to-sink taint analysis across files and services
  • Variant analysis that hunts for the same bug class as known CVEs
  • Proof-of-concept generation and validation
  • Findings exported with fix suggestions and CWE mapping

How it works

  1. 01Index & build code graph
  2. 02LLM triage of entry points and sinks
  3. 03Taint + reasoning on candidate paths
  4. 04PoC generation & verification
  5. 05Human expert review
Learn More about 515 CodeAudit AI
Internal Beta

515 AutoPentest AI

AI-Assisted Black-Box Penetration Testing

Currently used by Unit 515 researchers in internal assessments.

An AI-assisted penetration testing framework designed to support reconnaissance, attack hypothesis generation, controlled security testing, and evidence collection within defined assessment scopes.

  • Planner, recon, exploit and reporter agents working together
  • Scope guardrails, rate limits and approval gates
  • Full replayable evidence trail for every finding
  • Every report reviewed by a Unit 515 tester

How it works

  1. 01Scope & guardrails
  2. 02Automated reconnaissance and mapping
  3. 03Attack hypothesis generation
  4. 04Controlled exploitation testing
  5. 05Evidence collection and expert review
Learn More about 515 AutoPentest AI
Internal Beta

515 CAPE AI

AI-Assisted CVE Proof-of-Concept Generation

Currently used by Unit 515 researchers in internal assessments.

An AI-assisted research platform designed to support proof-of-concept development for published CVEs in controlled lab environments, with every generated PoC reviewed and validated by Unit 515 researchers.

  • Analysis of CVE advisories and patch changes
  • Proof-of-concept generation for lab reproduction
  • Controlled testing in isolated environments
  • Expert review and validation of every PoC

How it works

  1. 01CVE & advisory intake
  2. 02Patch change analysis
  3. 03PoC drafting
  4. 04Lab reproduction
  5. 05Expert validation
Learn More about 515 CAPE AI

Interested in Our Research Projects?

Contact Unit 515

Stay Updated on Unit 515 Research

Get updates on vulnerability discoveries, technical analyses, and the latest research from OPSWAT Unit 515.

Subscribe