#security

A tool that parses emails by enhancing the Python standard library, extracting all details into a comprehensive object.

Kubernetes controller for managing instances of SpiceDB

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

Fast Python static analysis powered by Rust. Detects dead code, security issues (including taint analysis), and code quality metrics like complexity, Halstead, maintainability, and nesting depth.

Authentication and authorization providers for Eclipse Vert.x

Static security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, SARIF output, OWASP CICD-SEC and CWE mappings.

Event-driven Terraform drift detector with Falco integration - Monitor CloudTrail, compare with IaC state, and alert on manual changes

Shark WebAuthn library for .NET. WebAuthn allows users to authenticate with cryptographic key pairs, where the private key remains securely stored on the user's device. This makes authentication resistant to phishing, credential stuffing, and data breaches.

Lint an npm or yarn lockfile to analyze and detect security issues

Web path scanner

Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.

Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.

Open-source Continuous Threat Exposure Management (CTEM) platform: asset discovery, attack surface management, risk-based prioritization, validation and remediation in one place. Go API + Next.js web UI.

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

Kubernetes operator for managing Kanidm

A Vite plugin to auto-generate Subresource Integrity (SRI) hashes.

Detect and redact secrets before they reach logs, storage, or LLM context. Deterministic Rust core for JavaScript, Python, Rust, and WebAssembly.

Git diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.

A lightweight and unified React Native library for biometric authentication across iOS and Android. Supports Face ID, Touch ID, and Fingerprint with a simple JavaScript API.

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.

MultiFactor Authentication for Silverstripe CMS

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.

Modern Cryptographic Firmware

PolicyKit zbus proxy

CvssSuite - This Ruby gem helps you to process the vector of the Common Vulnerability Scoring System.

Real-time npm/PyPI supply-chain threat detection. Behavioral chain analysis, AST scanning, IOC feeds, and compound scoring engine.

Drop-in authentication for Go: Argon2id passwords, EdDSA JWTs with refresh rotation, opaque API keys, OIDC + OAuth2 social login, email + username validation. Secure by default, zero boilerplate.

Rust Bindings for Endpoint Security

Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)