#security

🔒 Laravel validation rule that checks if a password has been exposed in a data breach.

XML-sitemap - OpenSearch - and other tools for ASP.NET Core webapps

A simple identity and access control implementation.

A local cryptographic inventory for developers and AI agents that carries verifiable coverage and its own limits inside the CBOM.

Read-only CLI that finds Git paths that collide, change meaning, or fail to check out across Windows, macOS, and Linux.

CLI toolkit for validating Kubernetes admission policies, Pod Security Admission labels, and cluster webhook safeguards.

Self-hosted favicon resolver with an SSRF-hardened fetch boundary. Resolves a domain's real favicon server-side so lookups never leak to a third party.

Self-contained PGP desktop app: encrypt, sign, verify and decrypt messages

Pay-per-call x402 gateway for AI agents — MCP server + OpenAI-compatible API for agent tools, market data, RPC, and MCP security audits. Pay in USDC on Base, no account.

Static code analyzer for .NET (Nuget package) based on Security Code Scan

Deterministic cross-repo contract analysis for AI agents: which frontend calls hit which backend endpoints (and which don't) — exact joins, disclosed blind spots, no guessing. TypeScript/JavaScript, Python, Java, C#, Rust, Go, Prisma, SQL natively; anything else via a documented adapter envelope. Rust core, zero network.

jsonp support for egg, with security check inside

Sheriff is a tool to scan repositories and generate security reports.

Production-ready Terraform modules for AWS security services (CloudTrail, GuardDuty, Security Hub, Config, Detective, Inspector, Macie, Access Analyzer)

Homebridge Plugin for HAI/Leviton Omni series Security & Home Automation Systems

🕵️‍♀️ MixAudit provides a mix deps.audit task to scan a project Mix dependencies for known Elixir security vulnerabilities

One specification for opaque rotating refresh tokens, and the ten reference implementations that must agree with it. RFC 9700 model, Apache-2.0.

Encrypted file transfer + reverse tunnel platform. SOCKS5 proxy, QUIC, Noise Protocol, MCP server, session persistence, HA clustering, PFS rekeying, per-tunnel ACLs, audit logging, traffic obfuscation. Single static binary.

phpMussel core (dedicated Composer version).

phpMussel upload handler (dedicated Composer version).

Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.

Make a regular expression time out if it takes too long to execute

Web intercepter, repeater and proxy.

Private, intelligent home security cameras. Fully end-to-end encrypted.

渗透测试Payload速查平台 | Pentest Payload Quick Reference | XSS/SQLi/SSRF/RCE | React+TypeScript

network time security client package for go

check-password-strength is an open-source tool that could help you to check how your passwords are good

Mask sensitive data: replace blacklisted elements with redacted values

An enterprise-grade Go framework focused on extreme performance optimization and financial-grade security.

MCP server — read-only log access for AI assistants. Debug your Linux server with AI, without giving the AI shell access.