#security

Hierarchical Role-Based Access Control for Node.js

Fast, zero-dependency redaction of secrets & PII from text and logs — in pure Rust.

Lightweight, fast, and secure TOTP (2FA) authentication library for PHP — battle tested, dependency free, and ready for enterprise integration.

Wispers Connect client library — secure, NAT-traversing, peer-to-peer connections. Rust core with wrappers for many languages.

Go library for BloodHound structured OpenGraph, the kind the UI can do pathfinding on. Payloads, extension definition schemas, and signed API requests. Standard library only.

Secret Scanner for Slack, Jira, Confluence, Asana, Wrike, Linear, Zendesk, GitHub, and GitLab

Create and validate signed URLs with a limited lifetime

Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.

Rust implementation of The Update Framework (TUF)

Deep artifact scanner for cloud-native environments. Find secrets hiding in container images, Helm charts, Kubernetes manifests, and nested archives.

VMware NSX DFW microsegmentation and security: distributed firewall, security groups, tags, traceflow, IDPS — MCP tools for AI agents

A library and SDK to redact sensitive content from GenAI/LLM telemetry (prompts, completions, tool arguments) before it reaches observability backends. Supports OpenTelemetry conventions.

CogNEXUS Labs builds the infrastructure that makes autonomous AI accountable to the enterprise. Our product, Artzain is the model-agnostic Agent Control Plane for autonomous systems. Here's the SDK

A flexible proxy for inspecting & transforming LDAP packets generated by any tool on the fly.

Lightweight prompt injection detection for LLM applications

No repository description published.

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.

Cryptographic Discovery Scanner - Find every cryptographic algorithm in your codebase and know your quantum risk - part of the QRAMM Toolkit by CSNP

libsodium for .NET - A secure cryptographic library

Web surface for milpa/live — HTML renderers + security-hardened LiveEndpoint. Apache-2.0.

Codebase intelligence shell and SDK — pip install jsat

Detect hidden Unicode attacks in source code before they fool you.

The open-source toolbox for HSM health, security posture and PKCS#11 diagnostics.

Unofficial Go client for the Have I Been Pwned API v3 — library, CLI, HTTP JSON server (Docker image), and FrankenPHP PHP extension, with Pwned Passwords k-anonymity checks.

Manage NetBird resources declaratively using Pulumi's infrastructure-as-code framework.

Pin your GitHub actions to a specific hash

An async security library for the Sanic framework.

netxfw standalone xdp安全防火墙 简单 小主机

S3 auditor for codebases and AWS. Scans repos for S3 bucket/object references, compares against AWS, detects missing buckets, unused buckets, stale objects, and suspicious versioned files.

Actively maintained, security-hardened fork of Gophish — the open-source phishing toolkit