#security

SSHamble: Unexpected Exposures in SSH

MCP server for Microsoft Entra ID sign-in/audit-log triage (read-only)

Zero-knowledge one-time secret sharing. End-to-end encrypted, self-hosted, open source.

A utility library for GitHub Repository Security related operations

Capability-oriented version of the Rust standard library

A type-safe-by-design, cost-limited virtual machine that enables the safe execution of untrusted code anywhere

Easily and securely log in to your customers sites when providing support.

The most comprehensive guard clause & validation ecosystem for .NET

A firewall and password manager for your AI coding agents.

Typosquat detector for AI coding agent dependencies

Console-IR. OCSF-native incident response and investigation TUI for the terminal. Triage findings, pivot on indicators, investigate hosts and accounts, GeoIP and WHOIS enrichment, case management, write the report. Single Go binary, SQLite, no server. Open Cybersecurity Schema Framework security tooling for SOC analysts and DFIR.

nosql-sanitize is a lightweight and blazing-fast suite of tools designed to prevent NoSQL Injection attacks in Node.js applications. It recursively sanitizes user-supplied data to remove characters and patterns (like $ and control characters) used in malicious MongoDB queries.

Open-source HIPAA compliance scanner for healthcare code. 140+ rules, 5 HIPAA categories. CLI + CI/CD + VS Code.

Lightweight, event-driven host security monitor for Raspberry Pi and ARM SBCs

Composable, non-opinionated authentication toolkit for Go — import the modules you need (identity, tokens/JWT, sessions, passkeys, OAuth/OIDC, MFA, OTP) and wire them with DI. Secure-by-default, no framework.

ESLint plugin with 18 rules that catch AI-generated code patterns — empty catch, floating promises, missing auth, and more

Network dependent Sudo session logger and logplayback GUI

Webauthn adapter for Laravel

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

Make it safe to serve untrusted SVG files

PostgreSQL modules using the pgpm workflow for safe, testable, reversible SQL changes.

Lexical path containment and traversal checks for Go: is this path inside that root? Stdlib-only.

Cryptographic Dependency Scanner - Identify quantum-vulnerable cryptographic algorithms in your software dependencies. Part of the QRAMM Toolkit.

A PHP SVG/XML Sanitizer

A pure Go software TPM 2.0 (vTPM) implementation. Including features such as measured boot, BitLocker sealing & attestation for Windows 11 guests under QEMU, built from the TCG spec.

Terminal UI to manage SSH keys, edit ~/.ssh/config, and audit your SSH security. Encrypted metadata + backups, an A–F security grade, byte-identical config editing. Single static binary, offline, no daemon.

A security-first bridge between Claude Code (MCP) and Chrome — HMAC pairing, domain allowlist, per-domain evaluate opt-in.

🐍 Cascavel — The zero-friction offensive security engine. Automate Red Team scans, validate exposures (CTEM), and generate compliance reports in one command.

Document admission gate — a cheap, deterministic check on untrusted uploads before storage, rendering or a remote service touches them

PHP arrays whose fields HTML-encode themselves when echoed, with chainable methods for filtering, sorting, and grouping database rows. XSS-safe by default, with SmartString's encoder behind it: at least 2.5x faster than calling htmlspecialchars() yourself.