#security

A fast universal code security scanner, written in Rust. Batteries included: supports 12 languages, TUI for triage, secrets, post-quantum audits, diff-aware scans and more 𓃥

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

Open-source AI pentest and compliance-readiness CLI by NullSquare.

Agent security and hardening

AI IDE security hook: blocks directories, scans secrets, and protects AI interactions

Official TypeScript SDK for the Webacy API — blockchain security and risk analysis

Fail-closed human and workload authentication for Python and Litestar: opaque sessions, mTLS, DPoP, SPIFFE, webhooks, and HTTP signatures.

🩺⚡ Runtime Doctrine ORM analysis integrated into Symfony Web Profiler. Detect N+1 queries, security vulnerabilities, and performance issues during query execution.

Zero-dependency TypeScript password validation — 7 validators, entropy & crack-time estimates, HIBP breach checks, React hook + WCAG AAA component. Core ~6.3KB gzipped.

🤔 Is this Web request from a real search engine🕷 or from an impersonating agent 🕵️‍♀️?

GDPR, WCAG 2.2 AA, and EAA compliant, self-hosted CAPTCHA alternative with PoW mechanism.

YASA-UAST is an intermediate representation structure for multi-language program analysis. The UAST-Parser parses code from different programming languages into a unified abstract syntax format.

A WAF secure by default and simple by design.

BouncyCastle.NET Cryptography Library (Mirror)

The easiest and most intuitive way to add access management to your Filament Panel; Resources, Pages & Widgets through `spatie/laravel-permission`

Allows Buildkite agents to use ephemeral GitHub tokens to authenticate their interactions. Avoids deploy keys and long-lived PATs.

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

Pythonic WebAuthn 🐍

Simple role-based authorization library for Ruby on Rails

Wilma - AWS Bedrock Security Configuration Checker

AWS/GCP KMS-based Ethereum signer for viem with enterprise-grade security. Sign transactions and messages using keys stored in AWS or GCP KMS without exposing private keys.

React Native SSL Pinning provides seamless SSL certificate pinning integration for enhanced network security in React Native apps. This module enables developers to easily implement and manage certificate pinning, protecting applications against man-in-the-middle (MITM) attacks. With dynamic configuration options and the ability to toggle SSL

Instant switching between user accounts in WordPress and WooCommerce.

Web path scanner

Audited & minimal JS implementation of hash functions, MACs and KDFs.

git diff for your SBOM ,compare CycloneDX/SPDX/Syft bills of materials, detect tampering, and gate CI

AI-powered security alert management that reduces noise and accelerates response time

Command-line interface for socket.dev security analysis

CLI tool for running coding agents inside hardware-isolated microVMs