#security

Discover, govern and control access to MCP servers and agent skills across your organization

Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more

Static analysis for GitHub Actions

OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI

Zen protects your Node app against attacks with one line of code. Get peace of mind— at runtime.

Pike is a tool for determining the permissions or policy required for IAC code

OpenZeppelin Contracts written in Cairo for Starknet, a decentralized ZK Rollup

Autonomous Hacking Agent for Red Team

Bandit is a tool designed to find common security issues in Python code.

aws-lc-rs is a cryptographic library using AWS-LC for its cryptographic operations. The library strives to be API-compatible with the popular Rust library named ring.

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

With Django Hijack, admins can log in and work on behalf of other users without having to know their credentials.

Important security headers for Fastify

Let's Encrypt/ACME client and library written in Go

The CIA Compliance Manager is an application that helps organizations assess and manage the availability, integrity, and confidentiality of their systems and data based on customizable security levels, providing real-time cost estimates, business impact assessments, and technical implementation details.

InSpec: Auditing and Testing Framework

Security scanner for AI agents, MCP servers and agent skills.

Kanidm: A simple, secure, and fast identity management platform

A fast, secure and easy to use VPN. Built by the makers of Firefox.

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

:closed_lock_with_key: Server API to support End-to-End Encryption

Static scanner for MCP-connected AI agent pipelines — 271 rules across 12 categories, 12 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.

Scapy: the Python-based interactive packet manipulation program & library.

Supercharge AI Agents, Safely

Security scanner for AI agents, MCP servers and agent skills.

Sōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome!

🧱 easy fast local-first microVM runtime and library

Manage your dotfiles across multiple diverse machines, securely.