#security

Per-operation approval and audit logging for secret access and git commit signing on Linux

Open-SSPM is a small “who has access to what” service. It syncs identities from Okta (IdP) and permissions from connected apps (GitHub, Datadog, AWS Identity Center). Demo: admin@admin.com / admin

Validate Swedish personal identity numbers

Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.

Rad Security MCP Server

MCP server for using the REMnux malware analysis toolkit via AI assistants

Fuzz your Rust code with Google-developed Honggfuzz !

Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go

Security & Observability for AI Agents — audit every tool call, enforce allow/block policies, catch prompt injection and data leaks. Local-first; works with Claude Code, Codex, Copilot CLI, OpenClaw, LangChain, and all major LLM APIs.

SimpleSAMLphp library for XML Security

Rust implementation of Modbus with idiomatic bindings for C, C++, .NET, and Java

Simple, high-security post-quantum file encryption library for .NET 10. Built on PostQuantum.FileFormat with passphrase and hybrid support.

A pure-Go WebAssembly sandbox for evaluating untrusted Jsonnet.

SecURL - passive external security posture scanner. Free hosted scanner, open-source engine, CI integration

Zero-knowledge password vault. Self-hosted, end-to-end encrypted, open source.

A simple service for interacting with an HSM or other PKCS#11 device.

A library and SDK to redact sensitive content from GenAI/LLM telemetry (prompts, completions, tool arguments) before it reaches observability backends. Supports OpenTelemetry conventions.

Composable, non-opinionated authentication toolkit for Go — import the modules you need (identity, tokens/JWT, sessions, passkeys, OAuth/OIDC, MFA, OTP) and wire them with DI. Secure-by-default, no framework.

Web research for pi with smart and safe tooling + agent system

Security without cookies or tokens

Open-source, invisible CAPTCHA that detects AI agents, bots, and headless browsers via 40+ behavioral signals, device & TLS fingerprinting, and SHA-256 proof of work. Self-hosted and privacy-first.

Opinionated PHP code-quality analyzer that scores findings across quality pillars and emits reports for terminals, CI, SARIF, HTML, and a local dashboard.

通用的Android inline hook库，支持thumb，arm32，arm64

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

Pure-Go off-heap secret memory: mmap/mlock, memfd_secret L4 isolation, guard pages, fail-closed by default

Let AI agents run nmap, metasploit, sqlmap, hydra and more in parallel — MCP server built for pentesting and CTF

Explain any lockfile change: bumps release-verified against 22 registries, vulns (OSV), ages, deprecations, typosquats, integrity tampering — 61 formats incl. pdm.lock, vcpkg, mise.lock, build.gradle, pom.xml, go.sum, GitHub Actions, GitLab CI, Dockerfiles, Kubernetes, Helm, SBOMs. CLI + CI gate + MCP server + playground. By an AI agent.

A modular tool to search for known vulnerabilities, exploits and more across various data sources

A utility library for GitHub Repository Security related operations

Install and persist the official CrowdSec firewall bouncer on UniFi OS devices (UDM, UDM SE, UDR) with automatic recovery from firmware updates