#security

Agent Receipts — cryptographically signed audit trails for AI agent actions. Protocol spec, SDKs (Go, TypeScript, Python), and MCP proxy.

A lightweight, configurable Identity Provider for development and testing. Supports OAuth2/OIDC and SAML 2.0 protocols with a full-featured web UI for configuration.

Java SDK for interacting with the Cerbos PDP.

SSRF + DNS-rebinding protection for Go: validate outbound URLs and dial safely

⚡️ Fast and lightweight malware scanner written in go.

Slow down repeated requests; use as an alternative (or addition) to express-rate-limit

MCP security guard + package manager. Block prompt injection, tool poisoning and rug-pulls in Model Context Protocol servers at runtime; trust-scored installs with Sigstore provenance for Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and Gemini CLI. Local, deterministic, no LLM in the loop.

Find secrets with Gitleaks 🔑

A .NET MIME creation and parser library with support for S/MIME, PGP, DKIM, TNEF and Unix mbox spools.

Chronicle - Verifiable Audit Logging and Append-Only Audit Trails for Laravel.

Enterprise application server for Node.js and Metarhia private cloud ⚡

Microsoft Security DevOps for GitHub Actions.

Heimdall Data Format (HDF) is a standardized JSON schema for representing security assessment baselines and results across diverse tools and platforms.

🌐 Abstraction for HTTP request, response and session. Provides careful data sanitization and utility for URL and cookies manipulation.

npm audit security report

The website QA tool for your coding agent. 295+ audit rules across SEO, performance, security, accessibility and agent experience.

pinact is a CLI to edit GitHub Workflow and Composite action files and pin versions of Actions and Reusable Workflows. pinact can also update their versions and verify version annotations.

Tinfoil JavaScript / TypeScript Client supporting the OpenAI API standard

Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.

Guard Core PHP - API Security Core Engine for PHP language

Directory Services Internals (DSInternals) PowerShell Module and Framework

A bot for helping you to stay secure! Services stay a wake

Jwt Manager. Set of components to deal with Jwt Stuff. Automate your key rotating, add support for jwks_uri. Store your cryptography keys in a secure place.

Command Line Interface (CLI) tool for BrightSec's solutions.

Automated code analysis for Laravel applications with 73 open-source analyzers covering security, performance, reliability, code quality, and best practices. ShieldCI Pro adds 82 more (155 total). Laravel 9+.

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

.NET Resource Server SDK that helps in validating incoming tokens

The easiest and most intuitive way to add access management to your Filament Panel; Resources, Pages & Widgets through `spatie/laravel-permission`

An experiment.

CatNet engine — Go scanning engine, zero external dependencies, event-driven channel API