#security

Hunt down 840+ social media accounts using AI

Agentic AI EDR for developer workstations and autonomous agent swarms. Build Swarm Detection & Response platforms with Clawdstrike.

Opinionated PHP code-quality analyzer that scores findings across quality pillars and emits reports for terminals, CI, SARIF, HTML, and a local dashboard.

An opinionated static analyzer for TypeScript and JavaScript projects - 119 rules across 11 pillars, baselines, SARIF/HTML/Markdown reports, CI annotations, and a local dashboard.

Injective composite-key encoding: join untrusted fields into one unforgeable key

Rune-safety policy for untrusted text bound for logs, JSON, or rendered output. Stdlib-only Go.

Bound the work an untrusted XML document can cost before and during an encoding/xml decode

Pure-Go off-heap secret memory: mmap/mlock, memfd_secret L4 isolation, guard pages, fail-closed by default

A tiny Go library to detect and redact API tokens, cloud credentials, and other secret material in arbitrary text.

A plugin-first dotnet framework for rapidly building anything hosted in the web.

MCP runtime for AI-assisted security testing with Kali tools, explicit target controls, bounded scanning, structured evidence, and persistent Docker deployment.

An exporter for storing OpenSSF Scorecard data as Prometheus metrics.

Fail CI when Go code or dependencies gain new privileged operations, using google/capslock

No repository description published.

Security infrastructure your AI can't be — deterministic, daily CVE intel past your model's training cutoff, whole-repo-aware, author-independent, and shift-left: secure_prompt secures the prompt before code generation. The security MCP for vibe coding: 450 rules, 39 tools, CLI + doctor for Next.js, Supabase, Clerk, Stripe, Prisma, Hono & MCP.

A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.

Rust CLI for reversible file operations. Every delete, modify, and move carries inversion metadata, enabling instant rollback without external backups. Uses content-addressed storage (SHA-256) and an append-only operation log. Formal proofs of the complete reversibility guarantee are pending.

Automatic Kubernetes security profile generator — Landlock, NetworkPolicy, seccomp, and Linux capabilities — built on observation of a running pod, not manual rule authoring.

No repository description published.

Monorepo for the Krova Cloud JS/TS packages — SDK, CLI, MCP, webhook verifier, n8n node.

Simplified PAM module creation in Rust

Security monitoring for small cloud operators. AI-native, self-hosted, Go. 17 detectors into an LLM investigation cascade.

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

Behavioral litmus harness for MCP servers — the open @polygraphso/litmus package (CLI, library, MCP server).

A modular tool to search for known vulnerabilities, exploits and more across various data sources

Self-hosted database access-control proxy for MySQL and PostgreSQL: lineage-aware column masking, Cedar policy, fail-closed deny, tamper-evident audit trail.

Hardened pure Rust RSA implementation with Marvin attack mitigation

AI-powered security alert management that reduces noise and accelerates response time

Produce a list of dependencies from an RPM database file

Capacitor plugin for Android and iOS mobile devices. SDK providing threat detection and security monitoring. Shield your app with free RASP. Detect reverse engineering, root (Magisk), jailbreak, Frida, emulators, bots, tampering and integrity issues, obfuscation, VPN usage, malware, and monitor device identification and fingerprint.