#security

23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV — unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.

Sheriff is a tool to scan repositories and generate security reports.

Astro integrations built for production — logging, tracing, security, i18n, and more for real-world websites.

Client-side, cross-host pre-push gate that catches PII and secrets — using an engine you choose — before anything reaches a public remote.

A deterministic CLI that audits your GitHub enterprise, orgs, and repos against a security baseline you own — rules are data, the bar is per-target.

Vulnerability detection and mitigation tool for Copy Fail and Dirty Frag bugs (CVE-2026-31431, CVE-2026-43284, CVE-2026-43500)

No repository description published.

Engineering-first HTTP backend library for Go focused on performance, security, and production-ready architecture.

local-first security analysis for TypeScript & JavaScript

No repository description published.

Simple to use, easy to deploy 2FA login for OpenVPN servers

Next generation web scanner

AI security gateway that inspects every prompt and response through a multi-layer detection pipeline - enforcing ALLOW, BLOCK, or SANITIZE before anything reaches the model.

Spin up secure, throwaway multi-node cloud test clusters — CPU or GPU — for distributed C++/IPC software. One command up, nothing left behind.

Safeguard your .NET MAUI app effortlessly by preventing content exposure, screenshots, and recordings with ease.

A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.

Majik Key is a next-generation seed phrase account library for creating and managing mnemonic-based identities. It provides a post-quantum ready, high-security bridge between BIP39 mnemonics and the Majikah ecosystem.

Panic-free bounded integer readers over untrusted byte slices (no_std, no deps)

Two-layer enforcement (pre-commit hook + CI mirror) for small teams using AI agents. Catches debug leaks, file growth, secrets, and forbidden patterns before they merge.

Official Terraform provider for the Thoth headless control plane

Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.

Python implementation of Dropbox's realistic password strength estimator

🍯 Unobtrusive and flexible spam protection for Rails apps

Reviewable AES-256-GCM educational tool with Argon2id, JSON envelopes, and safe-mode streaming.

Automatic security vulnerability remediation for your code.

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

Build plugin to use a nonce for the script-src directive of your site's Content Security Policy.

Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes security and compliance using Open Policy Agent/Rego

phpMussel core (dedicated Composer version).

Private, intelligent home security cameras. Fully end-to-end encrypted.