#security

Rust library for parsing and evaluating IAM policies. Provider-agnostic and designed for building flexible authorization systems.

Agent-safe sealed command execution — secrets injected behind airgap

Singul: Connect to your favorite services with a Singul line of code.

Cross-platform HttpClientHandler with TLS1.2 and Certificate Pinning

通用的Android inline hook库，支持thumb，arm32，arm64

A code ACL checker for Rust

🚀 Caido releases, wiki and roadmap

CLI + MCP server that audits what AI-generated code hides: security risks, algorithmic complexity, DB quality & code review.

Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.

Audit and fix your Mac's security in one command. No agent, no signup, open source.

GOSE = JOSE and friends for the Go developer

Security plugin for egg, force performance too.

Audit log plugin for Better Auth. Auto-captures auth events with severity inference, PII redaction, custom storage backends, and retention policies.

Trust what you ship: download and verify browser extension artifacts (zip structure, manifest, metadata) and emit a deterministic JSON report for CI release gates.

MCP server that gives LLM agents read-only shell access over SSH. Powers Fawdy (fawdy.com)

One gateway in front of every MCP server your agents can reach. A server that changes after you approved it is caught, the call is blocked before it runs, and nothing leaves your machine.

Passkey / WebAuthn for the Milpa PHP framework — a verified assertion mints a session. Zero framework, zero ORM.

SDK and tools for Microsoft Foundry Voice Live API - real-time voice interactions with AI agents

Resolve secrets from KeePass, AWS, Azure Key Vault, GCP Secret Manager, HashiCorp Vault, 1Password, macOS Keychain, and Windows Credential Manager into .env templates and subprocess environments.

Server-Side Request Forgery (SSRF) protection plugin for HTTPlug

A deterministic CLI that audits your GitHub enterprise, orgs, and repos against a security baseline you own — rules are data, the bar is per-target.

Library for quick product building using: Relational database (SQL Server, PostgreSql, MySql); NoSql database (MongoDb, Redis); Message Broker (RabbitMQ); Pipeline (Pipe and Filters pattern); Documentation (Swagger); Mapping (AutoMapper); Logging (NLog); Validation and specifications, unit of work, repository, among others.

Faraday middleware to prevent SSRF attacks

A Rust library for the Linux Landlock sandboxing feature

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.

Open-source data protection framework for AI agent workflows in n8n. Detects, tokenizes, and reversibly anonymizes sensitive data before it reaches your models.

WAF evasion testing toolkit. Grammar + encoding mutation, dialect-specific bypasses, evolutionary search, per-WAF gene-bank persistence. Rust.

Rust 製フロントエンドフレームワーク fandhe-frontend — SSR/SPA/SSG・単一実行ファイル配布。仕様: frontend-framework-spec

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.