#security

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own model.

MCP server for Caido proxy integration. Enables AI assistants like Claude Code to browse, analyse, and interact with HTTP traffic.

pytest for AI agents - Autonomous red-teaming, behavioral monitoring & security testing for LLM agents

Highly customizable low-interaction experimental honeypot that mimics specific hosts.

MCP servers expose tools with no information about what they actually do at runtime. mcpsafetywarden sits between your agent and any MCP server, profiling tool behavior, blocking destructive calls, and running active security audits before you trust them in a workflow.

Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)

React Native SSL Pinning provides seamless SSL certificate pinning integration for enhanced network security in React Native apps. This module enables developers to easily implement and manage certificate pinning, protecting applications against man-in-the-middle (MITM) attacks. With dynamic configuration options and the ability to toggle SSL

Self-hosted WAF middleware for Django: rate limiting, anomaly scoring, proof-of-work challenges, form protection, and nginx blocklists

SunLit Security Libraries: Rust security crates for OWASP-aligned services

A "Token Firewall" for MCP - reduce AI token costs by 50-80% while securing your code from secret leaks.

Pure PHP polyfill for ext/sodium

Rate Limit middleware for Hono Server

Exports OTLP metrics and logs from Microsoft Entra ID, Intune, Defender, M365 and Purview via Microsoft Graph, Azure Storage blobs and the O365 Management Activity API. Single Go binary, Grafana Cloud ready.

Patch-level verification for Bundler

Parse and validate Web Content-Security-Policy level 3

A modern, cross-platform OpenPGP tool with a unique dual-engine core: switch freely between the battle-tested GnuPG and a modern, memory-safe Rust rPGP backend. It makes encryption, signing, and key management easier and more trustworthy in everyday privacy workflows.

A Rust library that lets you automatically redact sensitive data for safe logging and debugging.

Local credential control for AI coding agents.

One wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access

A high-performance, flexible rate limiting library for TypeScript.

Rust implementation of Modbus with idiomatic bindings for C, C++, .NET, and Java

Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.

Simple, high-security post-quantum file encryption library for .NET 10. Built on PostQuantum.FileFormat with passphrase and hybrid support.

Runtime policy enforcement and audit control plane for MCP tool execution. Deterministic, non-AI policy engine that intercepts MCP tools/call requests before execution.

A dependency-free, no_std Rust crate for secure in-memory secret handling, constant-time checks, and automated clear-on-drop zeroization.

Multi-language taint and graph security scanner. Follows tainted data through your code and shows why each finding is a finding.

Safe-by-default script sandbox in Go. Runs programs under default-deny OS isolation on Linux (bubblewrap + Landlock + seccomp): credential shielding, per-host network allowlisting via a host-side CONNECT proxy, resource limits, and a profile-then-grant consent flow. macOS support is planned.

Lists, adds, or removes super admin users on a multisite installation.

Key manager that supports JWKs and remotely hosted keys

RegexParser: Static Analysis, Linter & Logic Solver for PHP