#security

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

opensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis

Sandbox any AI agent in seconds - zero setup, zero latency.

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

An implementation of Messaging Layer Security (RFC 9420)

All-in-one open-source framework & middleware for enterprise-grade multi-tenant and multi-tier XaaS Services development

The Github home of Orbot: Tor on Android (Also available on gitlab!)

The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.

Sandbox any AI agent in seconds - zero setup, zero latency.

A collection of crates for SPIFFE workload identity, Workload API clients, SPIRE-specific APIs, and TLS integration.

Your agent writes bad React. This catches it

Linux, macOS and Windows Install scripts for cnquery & cnspec

Linux, macOS and Windows Install scripts for cnquery & cnspec

Secure secrets management for TYPO3 with envelope encryption, access control, and audit logging

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Security-focused Laravel static analyser

About standalone, Kubernetes-native Software Bill of Materials (SBOM) visualization and governance platform

Associate users with roles and permissions

Rust Agent Development Kit (ADK-Rust): Build AI agents in Rust with modular components for models, tools, memory, realtime voice, and more. ADK-Rust is a flexible framework for developing AI agents with simplicity and power. Model-agnostic, deployment-agnostic, optimized for frontier AI models. Includes support for real-time voice agents.

C++ parser generator for dissecting protocols & files.

A restricted execution environment for Python to run untrusted code.

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

Find leaked secrets everywhere.

Public-metadata domain intelligence from DNS, certificate transparency, and unauthenticated identity discovery. Local Python CLI, versioned JSON, and stdio MCP server. No credentials or active scanning.

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning

AI-safe .env files: Schemas for agents, Secrets for humans.

The most flexible and standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core

Help secure Express apps with various HTTP headers

Secure Password Hashes for Python