#security

Drop-in authentication for Go: Argon2id passwords, EdDSA JWTs with refresh rotation, opaque API keys, OIDC + OAuth2 social login, email + username validation — secure by default, zero boilerplate.

A lightweight, configurable Identity Provider for development and testing. Supports OAuth2/OIDC and SAML 2.0 protocols with a full-featured web UI for configuration.

Allows Buildkite agents to use ephemeral GitHub tokens to authenticate their interactions. Avoids deploy keys and long-lived PATs.

Developer-first security scanning orchestration — describe your app in one file, run many scanners (SAST, SCA, secrets, IaC, containers, headers), get one SARIF verdict for CI & code scanning.

Monitor network traffic per executable

Receipt Required for AI agents — no receipt, no irreversible action. An open, offline-verifiable authorization-receipt protocol: a named human signs the exact high-risk action (payment, deploy, delete, permissions) before it runs, and anyone can verify it later, trusting no one. Apache-2.0 · formally verified · IETF Internet-Drafts.

MCP package manager with built-in trust scoring. Search, install, and audit MCP servers across Claude Desktop, Cursor, VS Code, and Windsurf.

m0lz.03 — Security proxy daemon for MCP servers. Auth, rate limiting, PII detection, permissions, audit logging.

Heimdall Data Format (HDF) is a standardized JSON schema for representing security assessment baselines and results across diverse tools and platforms.

An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .

Canonicalize and neutralize adversarial Unicode — homoglyph/bidi/zalgo/invisibles — before it reaches your classifiers, indexes, and identifiers

Command-line interface for socket.dev security analysis

RBAC-based And Policy-based Multi-Tenant Reactive Security Framework | 基于 RBAC 和策略的多租户响应式安全框架

An open-source authentication solution that scales with you. Embed it as a library in your Go app, or run it as a standalone auth server with any tech stack.

BCrypt.Net - Bringing updates to the original bcrypt package

Python3 library and command line for GreyNoise

Sandboxed SBOM extraction from arbitrary artifacts. Outputs traceability records and CycloneDX JSON for automation, auditability, and supply chain security.

A C# library for generating high entropy passwords similar to 1Password

GitLab CI security linter - find misconfigurations and vulnerabilities in .gitlab-ci.yml files

Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)

Collaborative application security testing between humans and agents via CLI and MCP

AI IDE security hook: blocks directories, scans secrets, and protects AI interactions

🤫 Discord-gated secrets broker for AI agents — encrypted vault, JWT sessions, Tailscale-only

Role and Attribute based Access Control for Node.js

A tool for securing CI/CD workflows with version pinning.

One wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access

A high-performance, flexible rate limiting library for TypeScript.

Lite & fast micro PHP auth library that is **easy to use**.

Adds, removes, lists, and resets roles and capabilities.

A GitHub Action to run the grype vulnerability scanner against your code repository and create a badge