#security

Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI infrastructure.

Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.

Security & Observability for AI Agents — audit every tool call, enforce allow/block policies, catch prompt injection and data leaks. Local-first; works with Claude Code, Codex, Copilot CLI, OpenClaw, LangChain, and all major LLM APIs.

Rust implementation of Modbus with idiomatic bindings for C, C++, .NET, and Java

Zero-knowledge password vault. Self-hosted, end-to-end encrypted, open source.

A library and SDK to redact sensitive content from GenAI/LLM telemetry (prompts, completions, tool arguments) before it reaches observability backends. Supports OpenTelemetry conventions.

Web research for pi with smart and safe tooling + agent system

Open-source, invisible CAPTCHA that detects AI agents, bots, and headless browsers via 40+ behavioral signals, device & TLS fingerprinting, and SHA-256 proof of work. Self-hosted and privacy-first.

Opinionated PHP code-quality analyzer that scores findings across quality pillars and emits reports for terminals, CI, SARIF, HTML, and a local dashboard.

AI agent configuration security auditor - find misconfigurations in Claude Code, Cursor, and other AI tools

Security-first remote Docker agent — authenticated Docker API proxy with outbound edge mode, Ed25519 per-request auth, and a cosign-signed, scratch-based supply chain. Drydock-native + generic REST.

Packet monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux

MCP server for using the REMnux malware analysis toolkit via AI assistants

SecURL - passive external security posture scanner. Free hosted scanner, open-source engine, CI integration

Generate OTP with expiry for PHP without using Database

A simple service for interacting with an HSM or other PKCS#11 device.

Attack Simulation Platform (ASP) for detection testing

🔒 Password Exposed Helper Function - Check if a password has been exposed in a data breach.

Scan your codebase for AI slop. Get a Slop Score. Ship clean. A zero-dependency CLI (85 detectors: security, performance, code-quality, design tells) + a 181-pattern Anti-Slop Protocol for AI coding agents.

Rapidly Search and Hunt through Windows Forensic Artefacts

An enterprise friendly way of detecting and preventing secrets in code.

Production-ready detection & response queries for osquery

Pure-Go off-heap secret memory: mmap/mlock, memfd_secret L4 isolation, guard pages, fail-closed by default

A security-first bridge between Claude Code (MCP) and Chrome — HMAC pairing, domain allowlist, per-domain evaluate opt-in.

Self-hosted WAF middleware for Django: rate limiting, anomaly scoring, proof-of-work challenges, form protection, and nginx blocklists

Secure, dependency-light inbound and outbound webhook runtime for Go, with optional durable PostgreSQL delivery.

SKCapstone — The sovereign agent framework. CapAuth backbone. Cloud 9 trust. SKMemory persistence. Same agent, same bond, same context — everywhere. Runs from ~/.

HTTP authentication library for Go servers with Bearer, API key, OAuth/JWT, OIDC auto-discovery, JWKS refresh, and OAuth proxy support.

Encrypted .env replacement: secrets encrypted client-side, stored on storage you already own, injected into your process.

Agent control plane for governed AI coding: validate changes, enforce policy gates, track findings, proofs, and evals based on your habits.