#security

CatNet engine — Go scanning engine, zero external dependencies, event-driven channel API

The first TypeScript REST API framework built for secure AI-assisted services. DaloyJS combines runtime portability, contract-first OpenAPI, generated typed clients, zero-dependency runtime guardrails, and supply-chain-aware project defaults in one framework.

Highly customizable low-interaction experimental honeypot that mimics specific hosts.

Monitor network traffic per executable

Deterministic authorization boundary for laravel/ai agents — models propose, applications authorize.

The authoritative definition of the GitHub Actions dependency lockfile format, plus a Go parser for auditing and verifying the action pins in use across a repo's workflows.

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

Fast, modern PHP request validation and sanitization. Schema-based rules, fail-fast execution, intelligent batching, and 100+ built-in validation rules.

Allows Buildkite agents to use ephemeral GitHub tokens to authenticate their interactions. Avoids deploy keys and long-lived PATs.

Allows Buildkite agents to use ephemeral GitHub tokens to authenticate their interactions. Avoids deploy keys and long-lived PATs.

m0lz.03 — Security proxy daemon for MCP servers. Auth, rate limiting, PII detection, permissions, audit logging.

A Rust library for the Linux Landlock sandboxing feature

A sponge-based secure hash function that uses AES-256 as its internal PRF.

Set Feature-Policy headers in a Laravel app

🤫 Discord-gated secrets broker for AI agents — encrypted vault, JWT sessions, Tailscale-only

Role and Attribute based Access Control for Node.js

An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .

Behavioral litmus harness for MCP servers — the open @polygraphso/litmus package (CLI, library, MCP server).

A type-driven, ergonomic RUST implementation of the PASETO protocol for secure stateless tokens.

Patch-level verification for Bundler

A tool for securing CI/CD workflows with version pinning.

Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.

One wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access

Pure Rust XML Security: XMLDSig, XMLEnc, C14N. Drop-in replacement for libxmlsec1.

Adds, removes, lists, and resets roles and capabilities.

The comprehensive guide for online anonymity and OpSec.

A self-contained cryptographic library for Python

Automatic Bisection Firefox and SpiderMonkey Bugs

Runtime Firewall for AI agents which catches the rogue tool call before it runs. Dangerous commands, secret leaks, prompt injection. For Claude Code, Codex and framework SDKs

Automated code analysis for Laravel applications with 73 comprehensive analyzers covering security, performance, reliability, code quality, and best practices. Works with Laravel 9+.