#security

Automatically scan AUR packages for malware before installing (using LLM/AI)

All-In-One Network Security Dashboard

Captcha for Laravel 5+

Go SSH Agent and utilities

Provael — red-team open Vision-Language-Action (VLA) robot policies in simulation and report an Attack Success Rate (ASR). Prove it. Prevail.

A Python interface to RFC 2743/2744 (plus common extensions)

Actively maintained, security-hardened fork of Gophish — the open-source phishing toolkit

A governed, local-first MCP development control plane for AI coding agents.

Wispers Connect client library — secure, NAT-traversing, peer-to-peer connections. Rust core with wrappers for many languages.

Automatic redaction of sensitive data for safe logging and debugging

A Go library for accessing client certificate identities across native OS stores and token-backed backends.

A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).

Secure CLI tool for managing secrets in a private GitHub/Gitlab repository with client-side encryption. uses Argon2id and AES-256-GCM to protect your secrets.

ShieldCI Analyzer Core - Shared foundation for building static analysis tools. Includes abstract analyzer classes, result formatters, file parsers, and utilities. Used by both shieldci/laravel and shieldci/laravel-pro packages.

Fast and smart content discovery tool with profiles, recursive scanning and technology-aware enumeration.

Cross-platform HttpClientHandler with TLS1.2 and Certificate Pinning

Ruby implementation of PASETO tokens

Self-hosted Information Security Management System — ISO 27001, NIS2, GDPR/DSGVO, BSI IT-Grundschutz

Trust what you ship: download and verify browser extension artifacts (zip structure, manifest, metadata) and emit a deterministic JSON report for CI release gates.

Server-Side Request Forgery (SSRF) protection plugin for HTTPlug

Monorepo for the Krova Cloud JS/TS packages — SDK, CLI, MCP, webhook verifier, n8n node.

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

Go client for the Have I Been Pwned API v3 — library, CLI, HTTP JSON server (Docker image), and FrankenPHP PHP extension, with Pwned Passwords k-anonymity checks.

Pin your GitHub actions to a specific hash

A Go library for parsing and decrypting macOS Keychain files (login.keychain-db)

Open-source data protection framework for AI agent workflows in n8n. Detects, tokenizes, and reversibly anonymizes sensitive data before it reaches your models.

Fast, zero-dependency redaction of secrets & PII from text and logs — in pure Rust.

No repository description published.

Smart auto-mode for Claude Code. The safe alternative to --dangerously-skip-permissions.

A type-safe-by-design, cost-limited virtual machine that enables the safe execution of untrusted code anywhere