#security-tools

Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)

Patch-level verification for Bundler

A modern, cross-platform OpenPGP tool with a unique dual-engine core: switch freely between the battle-tested GnuPG and a modern, memory-safe Rust rPGP backend. It makes encryption, signing, and key management easier and more trustworthy in everyday privacy workflows.

Local credential control for AI coding agents.

Quickly track and analyze your ruby gem dependencies

One wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access

Runtime policy enforcement and audit control plane for MCP tool execution. Deterministic, non-AI policy engine that intercepts MCP tools/call requests before execution.

A pre-commit hook for zizmor.

BonkLM - LLM Security Guardrails with Interactive Setup Wizard

The Certora Prover is the state-of-the-art security tool for automated formal verification of smart contracts running on EVM-based chains, Solana and Stellar

A fast WordPress plugin enumeration tool

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

CLI to interact with Kondukto

MCP-Bastion: The Zero-Infrastructure Runtime Middleware ,Enterprise-Grade Security Middleware for the Model Context Protocol (MCP)

Autonomous AI pentesting engine across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes, IoT firmware and AI/LLM endpoints (OWASP LLM Top 10). Real exploits with proof for every finding. Privacy gateway: the LLM never sees your real IPs, hosts or creds; nothing leaves your perimeter.

No repository description published.

Simplify integration with ANY.RUN REST API services

A chat bot monitoring issues in Jira

Agentic AI EDR for developer workstations and autonomous agent swarms. Build Swarm Detection & Response platforms with Clawdstrike.

An exporter for storing OpenSSF Scorecard data as Prometheus metrics.

Unified DLP scanner for secrets and PII across filesystem, git, stdin, and SaaS sources.

A modular tool to search for known vulnerabilities, exploits and more across various data sources

面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams

A Laravel package that proactively monitors your dependencies for security vulnerabilities by running automated composer audits and sending notifications via webhooks and email

Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI infrastructure.

Encrypt files with one command: hybrid post-quantum keys, built-in compression, key rotation without re-encrypting. Single binary for Linux, macOS, Windows.

Zero-knowledge one-time secret sharing. End-to-end encrypted, self-hosted, open source.

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

Console-IR. OCSF-native incident response and investigation TUI for the terminal. Triage findings, pivot on indicators, investigate hosts and accounts, GeoIP and WHOIS enrichment, case management, write the report. Single Go binary, SQLite, no server. Open Cybersecurity Schema Framework security tooling for SOC analysts and DFIR.