#security

🐍 Cascavel — The zero-friction offensive security engine. Automate Red Team scans, validate exposures (CTEM), and generate compliance reports in one command.

Document admission gate — a cheap, deterministic check on untrusted uploads before storage, rendering or a remote service touches them

PHP arrays whose fields HTML-encode themselves when echoed, with chainable methods for filtering, sorting, and grouping database rows. XSS-safe by default, with SmartString's encoder behind it: at least 2.5x faster than calling htmlspecialchars() yourself.

A Node.js middleware for Express that implements Security.txt - A Method for Web Security Policies

Per-operation approval and audit logging for secret access and git commit signing on Linux

Go library for SARIF - Static Analysis Results Interchange Format

Static analysis, linter & logic solver for PHP regular expressions

A Python interface to RFC 2743/2744 (plus common extensions)

Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.

Schema-backed contract layer for governed AI/security workflows: intent, policy decisions, approvals, execution receipts, evidence, and replayable audit traces.

A type-driven, ergonomic RUST implementation of the PASETO protocol for secure stateless tokens.

Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go

A tool for securing CI/CD workflows with version pinning.

SimpleSAMLphp library for XML Security

Encrypt and decrypt data using private/public keys

Coverage, security and code quality for coding agents

Zero-knowledge password vault. Self-hosted, end-to-end encrypted, open source.

A Tox-based instant messaging and video chat client.

Statically check whether a hostname or IP is a local, loopback, private, or link-local address.

CI/CD verification agent for Mipiti — submit evidence assertions and signed verification results from pipelines.

Automatic Bisection Firefox and SpiderMonkey Bugs

Secure CLI tool for managing secrets in a private GitHub/Gitlab repository with client-side encryption. uses Argon2id and AES-256-GCM to protect your secrets.

Tenant-isolation security scanner for self-hosted multi-tenant AI-agent platforms. SARIF, JSON, and MCP output.

A NuGet library that provides a set of methods to contribute to secure development by reducing the amount of boilerplate code.

Fast and smart content discovery tool with profiles, recursive scanning and technology-aware enumeration.

reCAPTCHA bot protection and online fraud prevention

AI agent & MCP trust registry — independent, evidence-based trust scores for 1.3K+ open-source AI agents and MCP servers. Runtime-trust calibrated (MCP, dependencies, provenance drift), with side-by-side comparison and embeddable live badges. Ranked by verifiable signals, not hype.

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

Run AI-generated JavaScript from Python, securely, in a sandbox: real V8 in a supervised, OS-sandboxed worker process (Seatbelt, Landlock, seccomp), with your Python functions as the only way out.

Open-source governed-sandbox control plane for any workload — per-run identity, brokered credentials, layered egress, approvals, and an append-only audit. Coding agents are the flagship use. Apache-2.0, self-hosted.