#security

Delegation without abdication. — an Object Capability Security tool suite for Agentic Harnesses

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.

ESLint Plugin SDL v2 focused on common security issues and misconfigurations.

Fail-closed human and workload authentication for Python and Litestar: opaque sessions, mTLS, DPoP, SPIFFE, webhooks, and HTTP signatures.

A secure JavaScript sandbox designed for safe AI agent code execution. Protects against code injection, prototype pollution, and sandbox escapes. The security layer that makes AI-generated code safe to run.

Batteries-included, transport-agnostic authentication for FastAPI.

PASETOrs: PASETO tokens in pure Rust

Order-revealing encryption library used by the CipherStash searchable encryption platform.

eBPF Firewall for GitHub Actions

AI-powered quality gate for CI: 121 modules, self-healing fixes, one verified PR. CLI, GitHub Action, MCP server, WordPress.

WinDbg-like kernel debugger for Windows, from Linux and macOS

A Kerberos implementation built entirely in managed code.

Pythonic WebAuthn 🐍

Collaborative application security testing between humans and agents via CLI and MCP

Monorepo for @gotgenes pi packages

HazelJS - Agent OS for TypeScript backends.

:video_camera: Complete HomeKit integration for all UniFi Protect device types with full support for most features including HomeKit Secure Video, and more. https://homebridge.io

Instant switching between user accounts in WordPress and WooCommerce.

Command-line tool that allows you to search for iOS, iPadOS, tvOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages.

Community Auth System for self-hosted Dagster OSS - simple RBAC, Audit-log, and Session Management

Deterministic security gate + bounded AI remediation prompts. NIST SSDF / OWASP ASVS / CWE Top 25 anchored. The security sibling to maintainability-agent.

Set Feature-Policy headers in a Laravel app

EncryptStorage provide a little more security in frontend

Provael — red-team open Vision-Language-Action (VLA) robot policies in simulation and report an Attack Success Rate (ASR). Prove it. Prevail.

Profile-based SSH key & config lifecycle manager.

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.

Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.

A validation module for validating HTTP Basic Authentication credentials in Functions.

Kubernetes operator: auto-generate NetworkPolicy from traffic patterns (learning/enforcing modes)