#security

PostgreSQL modules using the pgpm workflow for safe, testable, reversible SQL changes.

Lexical path containment and traversal checks for Go: is this path inside that root? Stdlib-only.

Cryptographic Dependency Scanner - Identify quantum-vulnerable cryptographic algorithms in your software dependencies. Part of the QRAMM Toolkit.

A PHP SVG/XML Sanitizer

A pure Go software TPM 2.0 (vTPM) implementation. Including features such as measured boot, BitLocker sealing & attestation for Windows 11 guests under QEMU, built from the TCG spec.

Terminal UI to manage SSH keys, edit ~/.ssh/config, and audit your SSH security. Encrypted metadata + backups, an A–F security grade, byte-identical config editing. Single static binary, offline, no daemon.

A security-first bridge between Claude Code (MCP) and Chrome — HMAC pairing, domain allowlist, per-domain evaluate opt-in.

🐍 Cascavel — The zero-friction offensive security engine. Automate Red Team scans, validate exposures (CTEM), and generate compliance reports in one command.

Document admission gate — a cheap, deterministic check on untrusted uploads before storage, rendering or a remote service touches them

A Node.js middleware for Express that implements Security.txt - A Method for Web Security Policies

Per-operation approval and audit logging for secret access and git commit signing on Linux

Go library for SARIF - Static Analysis Results Interchange Format

Static analysis, linter & logic solver for PHP regular expressions

A Python interface to RFC 2743/2744 (plus common extensions)

Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.

Schema-backed contract layer for governed AI/security workflows: intent, policy decisions, approvals, execution receipts, evidence, and replayable audit traces.

A type-driven, ergonomic RUST implementation of the PASETO protocol for secure stateless tokens.

Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go

A tool for securing CI/CD workflows with version pinning.

SimpleSAMLphp library for XML Security

Encrypt and decrypt data using private/public keys

Coverage, security and code quality for coding agents

Zero-knowledge password vault. Self-hosted, end-to-end encrypted, open source.

A Tox-based instant messaging and video chat client.

Statically check whether a hostname or IP is a local, loopback, private, or link-local address.

CI/CD verification agent for Mipiti — submit evidence assertions and signed verification results from pipelines.

Automatic Bisection Firefox and SpiderMonkey Bugs

Secure CLI tool for managing secrets in a private GitHub/Gitlab repository with client-side encryption. uses Argon2id and AES-256-GCM to protect your secrets.

A NuGet library that provides a set of methods to contribute to secure development by reducing the amount of boilerplate code.

Fast and smart content discovery tool with profiles, recursive scanning and technology-aware enumeration.