#security

secator - the pentester's swiss knife

A simple TLS proxy with mutual authentication for securing non-TLS services.

The Github home of Orbot: Tor on Android (Also available on gitlab!)

Secure Password Hashes for Python

in-toto Attestation Framework

Kubescape eBPF agent 🥷🏻

DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project

safely install npm packages by auditing them pre-install stage

A collection of crates for SPIFFE workload identity, Workload API clients, SPIRE-specific APIs, and TLS integration.

Linux, macOS and Windows Install scripts for cnquery & cnspec

🔑 Second factor provider using an external messaging gateway (Signal, SMS, Telegram, WhatsApp and XMPP)

Security and code-quality ESLint plugins — 477 rules across 30 packages: 272 security rules mapped to CWE + OWASP, 107 quality, 98 React/a11y. ESLint 8.40/9/10 + Oxlint. The lint layer AI-generated code needs.

Advanced vm/sandbox for Node.js

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

Rootly MCP server

A Rust port of shadowsocks

Associate users with roles and permissions

Rust KeePass database file parser for KDB, KDBX3 and KDBX4, with experimental support for KDBX4 writing.

Wazuh - Ansible playbook

Wazuh - Puppet module

C++ parser generator for dissecting protocols & files.

Comfortably monitor your network traffic 🕵️‍♂️

Security-first, self-hosted AI agents - isolation you can prove, not just promise.

Main MemberJunction Repository

⚡️ A package API to run a static analysis of your module's dependencies. This is the CLI engine!

JavaScript SDK for the socket.dev API

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

An implementation of Messaging Layer Security (RFC 9420)

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.