#security

Modular JOSE toolkit for Go, built on go-jose and golang-jwt/jwt for signing, verification, encryption, and public-key distribution.

Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes security and compliance using Open Policy Agent/Rego

Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.

Agent Skills Directory by Dr Clawdberg

Score-based runtime security middleware for Express with SQL injection, XSS, rate limiting, brute-force detection, suspicious behavior detection, payload anomaly detection, and IP reputation.

Security scanner and introspection tool for MCP servers. Connect, inspect, detect injection patterns, find tool shadowing, baseline for drift. Single binary, zero dependencies, Go stdlib only.

run your agent. it can't destroy your machine.

Multi-language MCP-Bastion connectors — shared bastion.yaml, adapters for TypeScript/Java/Go/.NET; security engine from PyPI mcp-bastion-python

ddos protection for elixir phoenix project

Secure Templates is a tool to render templates using go-templates and load data values from secrets engine.

Dynamic documentation fetching CLI that converts entire documentation sites to single markdown files for AI/LLM consumption

Shared governance engine for the opskit family of CLIs for AI agents — R0–R3 risk tiers, change-ticket & allow-flag authorization, RBAC, tamper-evident audit, credstore & redaction. Go library.

SecScan is a fast, configurable secret scanning tool written in Go that detects API keys, tokens, credentials, and high-entropy secrets across source code and full Git history. Built for developers and CI pipelines, with strong defaults and low false positives.

Passive network sensor: JA4 TLS fingerprinting, C2 beacon and DNS-tunnel detection, MITRE ATT&CK-mapped alerts. Single static Go binary with an embedded dashboard.

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

dj - Dynamic JS File Extractor - intelligently detects dynamically loaded JavaScript files by statically analyzing website HTML and JS code

The quality ratchet for TS/JS: 9 zero-config gates against a versioned baseline — quality can only improve, never regress.

Agent Identity Protocol - Zero-trust security layer for AI agents. Policy enforcement proxy for MCP with Human-in-the-Loop approval, DLP scanning, and audit logging.

Harden and manage your GitHub Actions: SHA-pin every action, enforce allowlist policies, update interactively, and analyze run health

Review what an Agent Skill can newly do, not just what bytes changed

Reviewable AES-256-GCM educational tool with Argon2id, JSON envelopes, and safe-mode streaming.

Async Rust-based secure file sanitization engine for images and videos using CDR pipelines.

No repository description published.

Comprehensive defense-in-depth Magento 2 module that closes the PolyShell unrestricted file upload vulnerability (APSB25-94) — blocking polyglot webshell uploads across eight interception layers including request path blocking, controller-level upload prevention, polyglot file detection, and framework-level image hardening.

Production-grade quantum-resistant steganography toolkit in Go. Implements 7 image/audio/text techniques, Kyber-1024 and Dilithium3, Reed-Solomon error correction, and 4 distribution patterns via a full CLI, following Clean Architecture (DDD + CQRS).

Runtime vulnerability scanner: finds CVEs in the services actually running on a host and ranks them by network exposure.

Shared security helpers (path scope, argv injection, SSRF) for Oubliette Shield / Sentinel / Dungeon / Trap / sift-guard

A Go Client library for interacting with the Nessus vulnerability scanner API

IronSkillet is a set of day-one configuration templates for PAN-OS to enable alignment with security best practices. See the Quick Start section below to get started using the template configurations.

A security utility for detecting and redacting likely secrets at runtime, in source files, Git commits, and CI.