#security

Ruby implementation of PASETO tokens

Go linter which checks for dangerous unicode character sequences

Securely encrypt, store, and share files, including but not limited to pictures and videos.

Docker Scout CLI

Lightweight Go tool and MCP server tool for running network diagnostics through proxies — compare direct vs proxied connections, detect DNS/TLS/IP leaks and expose your proxy as a local proxy in order to use it

MITRE CWE catalogue lookup for Go: canonical ID, name, description, and View-1400 category

Serve SOPS encryption in webservices and applications

Common MCP Server Components

Command-line TLS certificate inspector

A Go library for parsing and decrypting macOS Keychain files (login.keychain-db)

CLI tool to validate CVE v5 JSON records.

No repository description published.

Managed database waste and security auditor for AWS RDS and GCP Cloud SQL

Smart auto-mode for Claude Code. The safe alternative to --dangerously-skip-permissions.

local-first security analysis for TypeScript & JavaScript

Batteries-included Go cryptography library: AES-256-GCM & ChaCha20-Poly1305 authenticated encryption, argon2id/bcrypt password hashing, HMAC & Ed25519 signing, HKDF, key rotation, KMS envelope encryption, and secure random — safe defaults, stdlib-only, byte-for-byte interop with the TypeScript crypt-ts.

Open-source MCP server for WhisperGraph — query the internet's infrastructure & threat-intel graph (DNS, BGP, GeoIP, WHOIS) via Cypher.

Livewire Strict helps to enforce security measures and prevents you from leaving sensitive public properties unprotected.

Supply Chain Scanner is a local-first security tool that scans your project dependencies, developer environment, and IDE extensions for known vulnerabilities using multiple intelligence sources (OSV, NVD, GHSA, Sonatype), then prioritizes remediation with KEV/EPSS insights and easy-to-read reports — with no API key required for default use.

The Silent Observer — Fast, local-first security scanner for dependencies (SCA), exposed secrets & git history, SAST, Dockerfiles, and GitHub Actions with multi-provider AI remediation.

Production-grade MCP aggregation gateway in Go · Go 编写的生产级 MCP 聚合网关

HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values.

Security AI trainer/tuner and research toolkit. Fine-tune LLMs on MITRE ATT&CK-grounded data (QLoRA, GaLore, DeepSpeed, FP8, BitNet). 24K+ training pairs, 18 sources, 100% per-record provenance. Inversion-audit harness (Carlini 2021, 2022; MUSE 2024; LiRA). Terminal GUI for SSH use. 368+ tests.

23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV — unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.

TLS/SSL security analyzer for quantum readiness assessment and CNSA 2.0 compliance

Cryptographic trust infrastructure for MCP servers — signed manifests, TOFU pinning, two-gate enforcement, and the "npm audit" scanner.

TypeScript SDK for Declaw — security-first sandboxing for AI agents

Astro integrations built for production — logging, tracing, security, i18n, and more for real-world websites.

A small Go password hashing helper with create/verify support for Argon2id, bcrypt, scrypt, PBKDF2, and legacy MD5.

A cross-platform credential cache for .NET that keeps secrets in memory for fast process-lifetime lookup and persists each one through the host's native keyring: Windows Credential Manager, macOS Keychain Services, or the freedesktop.org Secret Service on Linux.