#security

Lite & fast micro PHP auth library that is **easy to use**.

Umbrella installer and combined report over the independently installable guardrail gates

Static security scanner for AI agents, MCP tools, and LLM applications. Detects OWASP LLM Top 10 risks, unsafe tool use, prompt injection paths, secrets, and AI infrastructure misconfigurations. Zero runtime dependencies.

A web based dashboard for fail2ban

Enumerate your Kubernetes cluster with just 1 command

The comprehensive guide for online anonymity and OpSec.

Python static analysis tool.

Encrypted .env replacement: secrets encrypted client-side, stored on storage you already own, injected into your process.

Attack Simulation Platform (ASP) for detection testing

Open-source AI security benchmarking CLI. Measure how AI models perform offensive security tasks with MITRE ATT&CK analysis and KSM scoring.

A self-contained cryptographic library for Python

Passkeys/FIDO2/WebAuthn .NET Library for Windows Desktop and CLI Applications

Two-layer enforcement (pre-commit hook + CI mirror) for small teams using AI agents. Catches debug leaks, file growth, secrets, and forbidden patterns before they merge, and scaffold-doctor tells you when a guardrail is installed but not actually running.

An enterprise friendly way of detecting and preventing secrets in code.

☁️ The Most Secure and Easy Selfhosted Home Server. Take control of your data and privacy without sacrificing security and stability (Authentication, anti-DDOS, anti-bot)

LLM agent evaluation framework with 7 Harness Gates (A–G) and 58 metrics. Supports LangChain, CrewAI, AutoGen, DSPy, PydanticAI. Native LLM-as-Judge, OTEL tracing, FastAPI dashboard.

面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams

Compartment is a self-hosted deployment system for small software on infrastructure your team controls.

The Most Comprehensive Docker Security Scanner

Gemstone Security Library

milpa/auth — the identity producer: Credential to Actor/AuthContext, PSR-15 middlewares, fail-closed scopes. Part of the Milpa PHP framework.

A collection of open source Rust crates from iqlusion

A lightweight Crowdsec remediation component for envoy proxy and envoy gateway

An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.

Simple extension that provides Basic, Digest and Token HTTP authentication for Flask routes

Open-SSPM is a small “who has access to what” service. It syncs identities from Okta (IdP) and permissions from connected apps (GitHub, Datadog, AWS Identity Center). Demo: admin@admin.com / admin

Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI infrastructure.

Build Content-Security-Policy headers from a JSON file (or build them programmatically)

Your vibe-coded app has hardcoded secrets, missing auth, and hallucinated imports. Find out in under a second.

excrypto offers specialized versions of the Go crypto, TLS, x509, and SSH packages designed for security research.