#security

A rust encryption library

agentgg cli

Spring Boot Addon to add JWT based security

Production-ready detection & response queries for osquery

Open-source governance control plane for coding agents — per-run identity, brokered credentials, layered egress, approvals, and an append-only audit. Apache-2.0, self-hosted.

Self-hosted Kubernetes image intake gateway: mirror → Trivy scan → CEL policy → Sigstore attestations. Admit only what passed.

Packet monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux

Terminal UI to manage SSH keys, edit ~/.ssh/config, and audit your SSH security. Encrypted metadata + backups, an A–F security grade, byte-identical config editing. Single static binary, offline, no daemon.

A security-first bridge between Claude Code (MCP) and Chrome — HMAC pairing, domain allowlist, per-domain evaluate opt-in.

A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.

Automatic Kubernetes security profile generator — Landlock, NetworkPolicy, seccomp, and Linux capabilities — built on observation of a running pod, not manual rule authoring.

Security boundary CLI proxy between AI coding agents and your shell — redacts secrets, neutralizes prompt injection, wraps untrusted terminal output, and audits every command. Single Rust binary.

Secure, dependency-light inbound and outbound webhook runtime for Go, with optional durable PostgreSQL delivery.

An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.

A stateless, zero-latency reverse proxy for real-time PII redaction in LLM streams.

Pure PHP polyfill for ext/sodium

Pilot Protocol handshake plugin — node-to-node trust negotiation, accept/deny flow, trust persistence (port 444)

Authentication provider for Microsoft AD FS to use with privacyIDEA.

A PHP library for XML Security

Local credential control for AI coding agents.

SKCapstone — The sovereign agent framework. CapAuth backbone. Cloud 9 trust. SKMemory persistence. Same agent, same bond, same context — everywhere. Runs from ~/.

Symfony Security ACL Component

Easily and securely log in to your customers sites when providing support.

Generate OTP with expiry for PHP without using Database

HTTP authentication library for Go servers with Bearer, API key, OAuth/JWT, OIDC auto-discovery, JWKS refresh, and OAuth proxy support.

Encrypted .env replacement: secrets encrypted client-side, stored on storage you already own, injected into your process.

🔒 Password Exposed Helper Function - Check if a password has been exposed in a data breach.

MCP server for Mipiti — security posture platform. Connect AI coding agents to threat modeling, controls, and compliance.

ioBroker Adapter for Amazon Blink System

Stoffel network (brand new) (super cool)