#security

Cisco AI Defense middleware for LangChain agents

A JOSE implementation in Python

Go SSH Agent and utilities

A curated, opinionated set of OpenCode plugins for spec-first, review-driven, safer agentic development.

Provael — red-team open Vision-Language-Action (VLA) robot policies in simulation and report an Attack Success Rate (ASR). Prove it. Prevail.

HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values.

Ruby implementation of PASETO tokens

Security plugin for egg, force performance too.

Let AI agents run nmap, metasploit, sqlmap, hydra and more in parallel — MCP server built for pentesting and CTF

Go library for reading, writing, and validating SARIF 2.1.0 logs

Server-Side Request Forgery (SSRF) protection plugin for HTTPlug

All-In-One Network Security Dashboard

A Python interface to RFC 2743/2744 (plus common extensions)

AI-native CWE (Common Weakness Enumeration) integration layer — Skills, Go SDK, CLI & MCP. Ship CVE/CWE tooling to SAST/DAST, vuln-management & AI agents.

Smart auto-mode for Claude Code. The safe alternative to --dangerously-skip-permissions.

A Go library for accessing client certificate identities across native OS stores and token-backed backends.

SSH Model Context Protocol Server - 为AI模型提供SSH功能

☁️ The Most Secure and Easy Selfhosted Home Server. Take control of your data and privacy without sacrificing security and stability (Authentication, anti-DDOS, anti-bot)

Securely encrypt, store, and share files, including but not limited to pictures and videos.

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.

Monorepo for the Krova Cloud JS/TS packages — SDK, CLI, MCP, webhook verifier, n8n node.

Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.

Pilot Protocol handshake plugin — node-to-node trust negotiation, accept/deny flow, trust persistence (port 444)

Authentication system for Node.js

ioBroker Adapter for Amazon Blink System

libsodium for .NET - A secure cryptographic library

A small Go password hashing helper with create/verify support for Argon2id, bcrypt, scrypt, PBKDF2, and legacy MD5.

Security boundary CLI proxy between AI coding agents and your shell — redacts secrets, neutralizes prompt injection, wraps untrusted terminal output, and audits every command. Single Rust binary.

CLI vulnerability scanner powered by Vulners — search, audit, scan, offline mode

A Go library for parsing and decrypting macOS Keychain files (login.keychain-db)