#security

Manage your dotfiles across multiple diverse machines, securely.

Multi-language agent runtime and library for execution scope management, lifecycle events, and middleware on tool and LLM calls.

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

Socket Python CLI to use in integrations

Implementation of the Cedar Policy Language

CLI to install, manage & troubleshoot Kubernetes clusters running Cilium

Deploy custom push protections and policies on top of Git

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Let's Encrypt/ACME client and library written in Go

GUAC aggregates software security metadata into a high fidelity graph database.

An open source, cloud-native security to protect everything from build to runtime

:closed_lock_with_key: Server API to support End-to-End Encryption

OpenFGA SDK for Java

📦 Produce secure packages and containers with declarative configurations

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

Protect against malicious open source packages 🤖

IAM Least Privilege Policy Generator

Scapy: the Python-based interactive packet manipulation program & library.

Go security checker

Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more

Static analysis for GitHub Actions

Zen protects your Node app against attacks with one line of code. Get peace of mind— at runtime.

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

A security library for FastAPI that provides middleware to control IPs, log requests, detect penetration attempts, honeypot setup, behavioural analysis, emergency mode lockdown, block Cloud Provider IPs, country blocking, and much more... It integrates seamlessly with FastAPI to offer robust protection against various security threats.

The CIA Compliance Manager is an application that helps organizations assess and manage the availability, integrity, and confidentiality of their systems and data based on customizable security levels, providing real-time cost estimates, business impact assessments, and technical implementation details.

Pike is a tool for determining the permissions or policy required for IAC code

AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessment, SBOM generation, and static analysis.

OpenVPN is an open source VPN daemon

OpenZeppelin Contracts written in Cairo for Starknet, a decentralized ZK Rollup