#security

A universal security-by-default framework for Model Context Protocol (MCP) servers that provides multi-layered defense against traditional attacks.

Codebase intelligence shell and SDK — pip install jsat

MCP governance proxy - zero-dependency single binary (Go)

Passlib fork

Safe archive-reader for ZIP-derived formats (ZIP, CRX, JAR, APK, IPA) with BOM-safe checks.

Safe archive-reader for ZIP-derived formats (ZIP, CRX, JAR, APK, IPA) with BOM-safe checks.

A Pi-native extension for thorough, agentic security audits

JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。

A simple identity and access control implementation.

Secrets that refuse to be stolen. Sealed API keys that decrypt only on your allowlisted repo — and raise a security error if anything tries to print, iterate, or read them. Every access attempt alerts the owner.

dj - Dynamic JS File Extractor - intelligently detects dynamically loaded JavaScript files by statically analyzing website HTML and JS code

MCP server — read-only log access for AI assistants. Debug your Linux server with AI, without giving the AI shell access.

No repository description published.

Async Rust-based secure file sanitization engine for images and videos using CDR pipelines.

Collection of ssl verification functions for Erlang

Graph-based cloud security analysis tool that shows attack paths and blast radius across Kubernetes and AWS.

C# implementation of the ALTCHA challenge.

Sift real security risk from the noise — a cross-platform CLI that live-validates leaked secrets and reachability-ranks npm/Yarn vulnerabilities, so you fix what's actually exploitable.

Your AI remembers what it did, proves it, and gets smarter every session

Sensitive is a middleware for GoFiber to blind sensitive value like mobile no, citizen id, etc. by defined configuration. Useful for security policies.

[READ ONLY] A generic interface to implement two-factor authentication in Symfony applications

Pure-Go CLI that scans APK files for leaked secrets. Zero dependencies, gitleaks-compatible rules, CI-friendly exit codes.

This is a Nodejs Module To prevent SSRF based attack's. Blocks request to Private IP and mitigate from further Bypass

No repository description published.

Simple sdt only otp in memory manager

SeamShield Community CLI: local-first access-lane scanning for AI-built apps

Security linter for a-h/templ: detects XSS-prone htmx / Alpine.js usage by parsing .templ files directly with parser/v2

Recon tool for pentesters & bug bounty hunters: check robots.txt, security.txt (RFC 9116) and /.well-known/ across many targets. CLI + web UI, single static Go binary.

Build a complete authentication system in NestJS — without Firebase or Auth0. nestjs-multi-auth is a self-hosted identity provider that handles: JWT + refresh tokens OAuth (Google, Facebook, Apple) Magic links (passwordless login) MFA / 2FA (TOTP) Account linking (multiple login methods per user)

No repository description published.