TypeScript★ 406↓ 10.2K/moSep 10, 2026

jitpass/jitFind the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and local-first.
Go★ 162Oct 22, 2026
Python★ 1Sep 18, 2026
JavaScript★ 2,039↓ 2,023/moSep 16, 2026
Go · PyPI77Goodhealth index

luisgf/infrabrokerInfrastructure access broker for AI agents — SSH & Kubernetes. Per-operation ephemeral credentials minted by a separate signer; the model never touches one. MCP stdio / HTTP+OIDC.
Go★ 10Sep 19, 2026
C#★ 859Sep 9, 2026
Packagist · npm77Goodhealth index

nette/forms📝 Generating, validating and processing secure forms in PHP. Handy API, fully customizable, server & client side validation and mature design.
PHP★ 531↓ 266.6K/moOct 20, 2026
crates.io77Goodhealth index

null8626/decancerA library that removes common unicode confusables/homoglyphs from strings.
Rust · C★ 131↓ 127.3K/moSep 18, 2026
TypeScript★ 2,329↓ 252.3K/moSep 11, 2026
TypeScript★ 591↓ 563/moSep 17, 2026

pascal-lab/Tai-eAn easy-to-learn/use static analysis framework for Java and Android
Java★ 1,814Sep 14, 2026
Packagist77Goodhealth index

php-casbin/php-casbinAn authorization library that supports access control models like ACL, RBAC, ABAC in PHP .
PHP★ 1,337↓ 36.7K/moSep 11, 2026
Packagist77Goodhealth index

promptphp/interceptA modular, drop-in middleware collection for Laravel AI SDK agents. Offers middleware across security, observability, performance and guidance.
PHP★ 63↓ 4,857/moSep 26, 2026
TypeScript★ 28↓ 189.8K/moOct 22, 2026

shcherbak-ai/tetheredtethered - Runtime network egress control for Python. One function call to restrict which hosts your code can connect to.
Python★ 10↓ 6,116/moOct 14, 2026
crates.io77Goodhealth index

souk4711/hakoniwaProcess isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.
Rust★ 89↓ 3,091/moSep 28, 2026
crates.io · Maven · npm77Goodhealth index

stepfunc/dnp3Rust implementation of DNP3 (IEEE 1815) with idiomatic bindings for C, .NET, C++, and Java
Rust★ 158↓ 3,521/moSep 10, 2026
Go · npm77Goodhealth index
Go★ 161Sep 18, 2026

this-is-securl/securlSecURL - passive external security posture scanner. Free hosted scanner, open-source engine, CI integration
TypeScript · JavaScript★ 3↓ 718/moSep 8, 2026
Python★ 149↓ 3,533/moOct 18, 2026

tumf/mcp-shell-serverSecure MCP server for whitelisted shell command execution with stdin, argv pipelines, timeouts, and structured audit logging.
Python★ 201Oct 21, 2026
crates.io · Maven77Goodhealth index
Rust★ 9↓ 6,995/moSep 10, 2026

yarrasys/kdbxPer-project secrets in local KeePassXC vaults, injected into commands without ever printing them. Agent-safe: PreToolUse guard hook + read-only MCP server. Single Go binary.
Go★ 4Sep 20, 2026
NuGet · npm75Goodhealth index

AlbusKavaliro/AntiXssInofficial port of https://web.archive.org/web/20180126072328/http://wpl.codeplex.com/ to .NET Standard 2.0
C#★ 13Sep 18, 2026
PyPI · npm75Goodhealth index
JavaScript · Python★ 11↓ 968.4K/moOct 22, 2026
NuGet · npm75Goodhealth index
C# · JavaScript★ 11Sep 30, 2026
npm · Go75Goodhealth index

HodeTech/LeakwatchHigh-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.
Go★ 4Sep 14, 2026
JavaScript · TypeScript★ 1↓ 2,113/moSep 18, 2026

OpenOSINT/OpenOSINTAI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.
Python · JavaScript★ 1,599↓ 2,892/moSep 18, 2026

Webacy-Prod/sdkOfficial TypeScript SDK for the Webacy API — blockchain security and risk analysis
TypeScript★ 4↓ 2,516/moOct 21, 2026