#security

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

WebAuthn (Passkeys) library for .NET.

No repository description published.

Scalable fuzzing infrastructure.

Open-source IP anonymization library and service used by StatusPage.me to preserve visitor privacy.

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

A JOSE implementation in Python

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

SQL powered operating system instrumentation, monitoring, and analytics.

Safely pass trusted data to untrusted environments and back.

The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.

[READ ONLY] RBAC security layer based on NIST definition, role/rule/permission associations, bulletproof. Subtree split of the Spiral Security component (see spiral/framework)

MCP for CTFTime

JavaScript library for work with Uploadcare API

The universal solution for delivering your software updates securely from a trusted The Update Framework (TUF) repository.

A set of classes to handle common security-related tasks

Simple yet powerful Hybrid (Post-Quantum + Classic Cryptography) VPN library written from scratch in Go

A powerful, cross-platform GUI application for checking and managing large lists of proxies and socks.

PII never accidentally reaches your logs, traces or AI prompts. Annotation-driven data masking for Java, with drop-in Jackson, Logback, OpenTelemetry, Kafka, JDBC and Spring Boot integrations.

A wrapper around grep, to help you grep for things

HTML5 support for HTMLPurifier

HTTP security headers for Flask

SDK to interact with public and private graphs

Linux device guard written in Go. Listens to kernel uevents to instantly block unauthorized USB and Bluetooth devices.

Surgical, zero-touch live diagnostic utility for hardened Kubernetes clusters.

GitOps-safe one-way encrypted secrets, unsealed at container runtime as ephemeral env vars, for Docker Compose

Custom validator for playground doing reCAPTCHA v3 validation.

Make a synchronous function have a timeout

TypeScript rewrite of the zxcvbn password strength estimator — strict types, dual CJS/ESM output, and 93k word dictionaries included

详细的C/C++编程规范指南，由360质量工程部编著，适用于桌面、服务端及嵌入式软件系统。