#security

Validate environment variable usage in codebase

Open-source AI-powered offensive security harness for automated penetration testing.

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.

OXO is a security scanning orchestrator for the modern age.

Cloud-native authorization for modern applications and APIs

Official command-line tool for managing SpiceDB

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0

A .NET class library for the Bluesky social network.

JavaScript toolchain for working with WebAssembly Components

Scan MCP servers for potential threats & security findings.

All-in-one open-source framework & middleware for enterprise-grade multi-tenant and multi-tier XaaS Services development

AI-safe .env files: Schemas for agents, Secrets for humans.

Zerocopy makes zero-cost memory manipulation effortless. We write `unsafe` so you don’t have to.

🕵️‍♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 550+ actively maintained scan vectors (175+ email / 375+ username) for security research, investigations, and digital footprinting.

Secrets Vault for TYPO3 - Central, secure storage for API keys, credentials and other secrets with envelope encryption, access control, audit logging and a secure HTTP client.

Ziti SDK for Golang

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Code-signing for npm packages

Light, Secure, Pure Javascript OIDC (Open ID Connect) Client. We provide also a REACT wrapper (compatible NextJS, etc.).

Docker socket proxy. Filter API requests by method and path with default-deny posture, structured audit logging, and Tecnativa drop-in compatibility.

Guard Core - API Security Core Engine for FastAPI-Guard adapter, FlaskAPI Guard adapter and DjAPI Guard adapter

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as token, passwords, api keys etc.) in advance. By scanning lines, filtering, and using AI model as option, CredSweeper reports lines with possible credentials, where the line is, and expected type o

.NET library used to integrate with Descope