#security

Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)

An open-source authentication solution that scales with you. Embed it as a library in your Go app, or run it as a standalone auth server with any tech stack.

Security infrastructure your AI can't be — deterministic, daily CVE intel past your model's training cutoff, whole-repo-aware, author-independent, and shift-left: secure_prompt secures the prompt before code generation. The security MCP for vibe coding: 450 rules, 39 tools, CLI + doctor for Next.js, Supabase, Clerk, Stripe, Prisma, Hono & MCP.

A Tox-based instant messaging and video chat client.

A password generator inspired by https://xkcd.com/936/

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI infrastructure.

Build Content-Security-Policy headers from a JSON file (or build them programmatically)

Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.

excrypto offers specialized versions of the Go crypto, TLS, x509, and SSH packages designed for security research.

A modern, cross-platform OpenPGP tool with a unique dual-engine core: switch freely between the battle-tested GnuPG and a modern, memory-safe Rust rPGP backend. It makes encryption, signing, and key management easier and more trustworthy in everyday privacy workflows.

Zero-knowledge one-time secret sharing. End-to-end encrypted, self-hosted, open source.

Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.

Modern Web Server for .NET. Designed for Simplicity. Built for Speed.

A web based dashboard for fail2ban

Lists, adds, or removes super admin users on a multisite installation.

RegexParser: Static Analysis, Linter & Logic Solver for PHP

Lightweight, event-driven host security monitor for Raspberry Pi and ARM SBCs

Attack Simulation Platform (ASP) for detection testing

All-In-One Network Security Dashboard

Passkeys/FIDO2/WebAuthn .NET Library for Windows Desktop and CLI Applications

Network dependent Sudo session logger and logplayback GUI

Hunt down 840+ social media accounts using AI

Security-first remote Docker agent — authenticated Docker API proxy with outbound edge mode, Ed25519 per-request auth, and a cosign-signed, scratch-based supply chain. Drydock-native + generic REST.

PostgreSQL modules using the pgpm workflow for safe, testable, reversible SQL changes.

Rune-safety policy for untrusted text bound for logs, JSON, or rendered output. Stdlib-only Go.

No repository description published.

Audit and fix your Mac's security in one command. No agent, no signup, open source.

A tiny Go library to detect and redact API tokens, cloud credentials, and other secret material in arbitrary text.

Minimal single-organization secret-management server (Go, single binary, SQLite)