#security

Lightweight security agent for Linux servers — SSH brute force, WAF, bot detection, Docker/Kubernetes native. Deploy via curl, Docker, Helm.

Zero-dependency TypeScript secret and PII redaction for any SDK, logs, HTTP, LLM prompts, and scoped MCP tool boundaries.

Opinionated, environment-aware encryption for Go, inspired by Laravel’s Crypt facade.

PHP strings that HTML-encode themselves on echo, interpolation, and concatenation. XSS-safe by default and at least 3x faster than calling htmlspecialchars() yourself.

Linter for Arch Linux PKGBUILDs

m0lz.03 — Security proxy daemon for MCP servers. Auth, rate limiting, PII detection, permissions, audit logging.

Cost calculator for offline password brute-force attacks: time + USD per GPU profile, with a CI gatekeeper.

Explain any lockfile change: bumps release-verified against 22 registries, vulns (OSV), ages, deprecations, typosquats, integrity tampering — 61 formats incl. pdm.lock, vcpkg, mise.lock, build.gradle, pom.xml, go.sum, GitHub Actions, GitLab CI, Dockerfiles, Kubernetes, Helm, SBOMs. CLI + CI gate + MCP server + playground. By an AI agent.

A password generator inspired by https://xkcd.com/936/

Safe eval runtime

An opinionated agentic development layer for OpenCode — spec-first when it matters, review-driven execution, portable model roles, safer tools, and long-run safety.

Pilot Protocol handshake plugin — node-to-node trust negotiation, accept/deny flow, trust persistence (port 444)

Rad Security MCP Server

Fuzz your Rust code with Google-developed Honggfuzz !

Rust library for handling CVSS score

Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.

CLI to spot risky AI skill packages before you use them. Scans for injection, exfiltration, supply chain, and other threats.

Mitigate SSRF and DNS rebinding in reqwest by filtering DNS lookups, redirect targets, and URL literals through an IP / host ACL