#security

Community curated list of templates for the nuclei engine to find security vulnerabilities.

RustSec API & Tooling

Go security checker

A collection of additional crates supporting the actix and actix-web frameworks.

aws-lc-rs is a cryptographic library using AWS-LC for its cryptographic operations. The library strives to be API-compatible with the popular Rust library named ring.

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

safely install npm packages by auditing them pre-install stage

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

OXO is a security scanning orchestrator for the modern age.

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

🧱 easy, fast and local-first microVM runtime

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

Upgradeable variant of OpenZeppelin Contracts, meant for use in upgradeable contracts.

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

Important security headers for Fastify

A standalone exporter for vulnerability reports and other CRs created by Trivy Operator (formerly Starboard) and Kubescape.

Official IVPN Desktop app

Your sats. Your privacy. Your profit.

A collection of crates for SPIFFE workload identity, Workload API clients, SPIRE-specific APIs, and TLS integration.

Secure Boot & Measured Boot for NixOS [maintainers=@blitz @raitobezarius @nikstur]

OXO is a security scanning orchestrator for the modern age.

isolated bosh jobs

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.

Sandbox any AI agent in seconds - zero setup, zero latency.

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

Searchable, application-level encryption for building privacy-first apps

Secure Password Hashes for Python

Sandbox any AI agent in seconds - zero setup, zero latency.

Linux, macOS and Windows Install scripts for cnquery & cnspec