#security

Autonomous Hacking Agent for Red Team

Bandit is a tool designed to find common security issues in Python code.

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

Open source Dropbox-like file sharing with full client encryption !

Cameradar hacks its way into RTSP videosurveillance cameras

A collection of additional crates supporting the actix and actix-web frameworks.

Kubernetes-native security toolkit

Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your JS/TS code.

aws-lc-rs is a cryptographic library using AWS-LC for its cryptographic operations. The library strives to be API-compatible with the popular Rust library named ring.

A secure low code deception runtime framework, leveraging AI for System Virtualization.

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

Searchable, application-level encryption for building privacy-first apps

SCuBA Secure Configuration Baselines and assessment tool for Google Workspace

Security Scanner for Agent Skills

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

Ethereum smart contract fuzzer

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Important security headers for Fastify

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

FIDO2 Conformant WebAuthn and Passkey backend library for golang

InSpec: Auditing and Testing Framework

🕵️‍♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.

Kanidm: A simple, secure, and fast identity management platform

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

Backend for HTTP Observatory on MDN

open source, cloud-native, graph-based query language

Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. Hundreds of rules.

A fast, secure and easy to use VPN. Built by the makers of Firefox.