herculessecurity/hercules repository overview

⁠Hercules — AppSec / DevSecOps Platform

Hercules is an automated security analysis platform designed for modern development teams. It provides a comprehensive suite of tools to identify vulnerabilities, enforce security policies, and streamline compliance across the entire SDLC.

Core Capabilities:

• SCA (Software Composition Analysis) — SBOM generation, vulnerability scanning, license compliance
• SAST (Static Application Security Testing) — Source code analysis for security flaws and hardcoded secrets
• DAST (Dynamic Application Security Testing) — Runtime security testing of web applications
• API Security Testing — Fuzzing and security analysis for REST, GraphQL, and SOAP APIs
• Threat Modeling — STRIDE-based visual threat modeling and attack tree diagrams
• CI/CD Integration — REST API and webhooks for seamless pipeline integration

⁠🚀 Quick Start (Docker)

The easiest way to get started is to run the pre-built Docker image:

docker run -d \
  -p 6565:6565 \
  --name hercules \
  --restart unless-stopped \
  herculessecurity/hercules:latest