#security

Validate URLs and IP addresses against SSRF, DNS rebinding, and cloud-metadata attacks.

Landlock bindings for Ruby

GateKey is a zero-trust VPN solution that wraps OpenVPN. Users authenticate via their company's identity provider (Okta, Azure AD, etc.) and get short-lived VPN credentials automatically. No passwords to remember, no certificates to manage.

Go library for reading, writing, and validating SARIF 2.1.0 logs

Browser security utilities for WordPress/Altis

Point it at a folder and find out what is missing, and what silently changed. Coverage over dated or numbered series, plus a baseline anyone can keep. No model decides any of it.

PHP/MySQL database layer where values only enter SQL through placeholders and every result HTML-encodes itself on output. Within microseconds of raw mysqli + htmlspecialchars().

Security boundary CLI proxy between AI coding agents and your shell — redacts secrets, neutralizes prompt injection, wraps untrusted terminal output, and audits every command. Single Rust binary.

Minimal single-organization secret-management server (Go, single binary, SQLite)

Tunneling data over webrtc to bypass censorship

Rust library for encapsulating HTTP messages in a cryptographic wrapper

P6M7G8: AWS CDK Construct that makes IAM Roles for GitHub Actions to Assume via OIDC

P6M7G8: AWS CDK Construct that protects S3 Buckets in real-time

JS Build Tools: helpers for building, benchmarking & testing secure JS apps.

Elder is a Workstream, Issues, Relationships, Entities, and Document management solution to keep your knowledge in one place. It integrates natively using MCP to most AI agents, and includes collaborative spaces for design and more!

Validate Swedish personal identity numbers

For docs, visit: https://docs.darwiniantools.com or https://deepwiki.com/remyjkim/darwinian-worker

A PHP library for XML Security

A governed, local-first MCP development control plane for AI coding agents.

AI-native CWE (Common Weakness Enumeration) integration layer — Skills, Go SDK, CLI & MCP. Ship CVE/CWE tooling to SAST/DAST, vuln-management & AI agents.

No repository description published.

Payload CMS plugin for event tracking, auditing, and security. Monitor activities and analyze user behavior.

A Go library for accessing X.509 certificate identities across native OS stores and token/database-backed backends.

XPI — offensive security tools for Pi Agent: casefile, exploit search, web lookup, code intelligence, todo tracker

ESLint for AI slop. Detect AI-generated code smells in your JS/TS and Python codebase.

AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.

SSH Model Context Protocol Server - 为AI模型提供SSH功能

🔒 Password Exposed Helper Function - Check if a password has been exposed in a data breach.

Orchard module for site owners to be able to log in as any user.

Line-based testcase reducer