#security

MCP server for SCF Controls Platform — security compliance controls, frameworks, evidence, and risk management for AI agents

GDPR, WCAG 2.2 AA, and EAA compliant, self-hosted CAPTCHA alternative with PoW mechanism.

A policy enforcement runtime for AI agents

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

🔐 The password manager for terminal users and AI agents. Age-encrypted, keyring-cached, MCP-ready. Zero telemetry.

Simple role-based authorization library for Ruby on Rails

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

Drop-in authentication for Go: Argon2id passwords, EdDSA JWTs with refresh rotation, opaque API keys, OIDC + OAuth2 social login, email + username validation — secure by default, zero boilerplate.

AWS/GCP KMS-based Ethereum signer for viem with enterprise-grade security. Sign transactions and messages using keys stored in AWS or GCP KMS without exposing private keys.

A utility for managing Cloudflare Security settings

A fast universal code security scanner, written in Rust. Batteries included: supports 12 languages, TUI for triage, secrets, post-quantum audits, diff-aware scans and more 𓃥

🛡️ Static analyzer for documentation governance. Audits broken links, credentials, brand compliance & i18n parity. Engine-agnostic — works with MkDocs, Zensical, and any Docs-as-Code setup.

Wilma - AWS Bedrock Security Configuration Checker

git diff for your SBOM ,compare CycloneDX/SPDX/Syft bills of materials, detect tampering, and gate CI

Repair and secure untrusted HTML

A library for various security related utility methods

A validation module for validating HTTP Basic Authentication credentials in Functions.

Verifies file integrity by comparing to published checksums.

.NET Resource Server SDK that helps in validating incoming tokens

A WAF secure by default and simple by design.

SSRF + DNS-rebinding protection for Go: validate outbound URLs and dial safely

A Laravel package that proactively monitors your dependencies for security vulnerabilities by running automated composer audits and sending notifications via webhooks and email

A nearly complete implementation of the UniFi Protect API.

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.

Provides a TOTP-based authentication method for the Silverstripe MFA module.

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.

CLI tool for running coding agents inside hardware-isolated microVMs

A lightweight, user-friendly web interface for managing Caddy as a reverse proxy. It simplifies SSL management and host routing for self-hosters who want the power of Caddy without the manual configuration.

Agent Beacon is the world's first open-source telemetry layer for AI agents wherever they run: locally, in CI, or in the cloud.