#security

Optimized package overrides for Socket Optimize

Kubernetes controller for managing instances of SpiceDB

Event-driven Terraform drift detector with Falco integration - Monitor CloudTrail, compare with IaC state, and alert on manual changes

📝 Generating, validating and processing secure forms in PHP. Handy API, fully customizable, server & client side validation and mature design.

subresource integrity for npm

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

CvssSuite - This Ruby gem helps you to process the vector of the Common Vulnerability Scoring System.

Security-first remote Docker agent — authenticated Docker API proxy with outbound edge mode, Ed25519 per-request auth, and a cosign-signed, scratch-based supply chain. Drydock-native + generic REST.

Agentic SOC Platform: A powerful, flexible, open-source, and agent-centric automated security operations platform (AI SOC)

Get Android app updates straight from the source.

Audit logging, exports, alerts, and dashboards for Filament admin panels.

Agent Receipts — cryptographically signed audit trails for AI agent actions. Protocol spec, SDKs (Go, TypeScript, Python), and MCP proxy.

🔐 The password manager for terminal users and AI agents. Age-encrypted, keyring-cached, MCP-ready. Zero telemetry.

A Kerberos implementation built entirely in managed code.

:video_camera: Complete HomeKit integration for all UniFi Protect device types with full support for most features including HomeKit Secure Video, and more. https://homebridge.io

Encrypted secrets manager for developers and agents.

Open Source Vulnerability Management Platform

Move OIDC token acquisition out of your app code and into the Istio mesh

A cross-platform .NET library for IMAP, POP3, and SMTP.

EncryptStorage provide a little more security in frontend

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

Kubernetes operator for managing Kanidm

Open-source firewall for AI agents. Policy engine that audits and controls what OpenClaw, Claude Code, Cursor, Codex, and any AI tool can do on your machine.

Java 17 Library with tons of utility classes required in all projects

Java implementation of Tink

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

Database anonymization and test data management

Open-source eBPF compatibility evidence and CI gate

RSA implementation in pure Rust

Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.