#security

Linux, macOS and Windows Install scripts for cnquery & cnspec

☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Light, Secure, Pure Javascript OIDC (Open ID Connect) Client. We provide also a REACT wrapper (compatible NextJS, etc.).

opensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

JavaScript toolchain for working with WebAssembly Components

The most flexible and standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core

NFTBan is an open-source Linux Intrusion Prevention System (IPS) and firewall manager built on nftables, designed to integrate cleanly with modern Linux security stacks.

🕵️‍♂️ (2-in-1) Email & Username OSINT suite for deep data extraction. Analyzes 310+ scan vectors (120+ email / 190+ username) for security research, investigations, and digital footprinting.

DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project

Secure secrets management for TYPO3 with envelope encryption, access control, and audit logging

Sandbox any AI agent in seconds - zero setup, zero latency.

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

Modular TypeScript SDK for the ADAMANT blockchain and deterministic wallet helpers

Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 238 commands, 224 MCP tools, change-safety gates, audit evidence, zero API keys.

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

AI-safe .env files: Schemas for agents, Secrets for humans.

A collaborative learning framework for empowering biomedical research

The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.

Use DOMPurify on server and client in the same way

Sample application for Phalcon Framework (Acl, Auth, Security)

A restricted execution environment for Python to run untrusted code.

Keeper Commander is a python-based CLI and SDK interface to the Keeper Security platform. Provides administrative controls, reporting, import/export and vault management.

Self-hosted authentication & authorization system (IAM: OAuth2 & OpenID Connect provider with realms, RBAC & ABAC policies, MFA (TOTP, passkeys, email OTP), identity federation (OIDC, LDAP) and session management.

Flyto2 Core is the open-source execution kernel for automation and AI-agent workflows: 451 registry-backed modules, MCP-native transport, YAML recipes, evidence capture, replay, triggers, queue, versioning, and metering.

DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project

No repository description published.

Terraform Mondoo provider

📝 Generating, validating and processing secure forms in PHP. Handy API, fully customizable, server & client side validation and mature design.