#security

Authentication and authorization service (JWT, OAuth, users)

TLS in pure OCaml

Rust library for Windows Filtering Platform (WFP)

A tool to generate an HTML report from pnpm audit.

Symfony Bundle used to Encrypt and Decrypt data and variables in the Web application

Опис репозиторію не опубліковано.

Automated cacert.pem management for PHP projects

Diagnose and fix performance, correctness, and architecture issues in your Svelte codebase

Auto-apply Cloudflare/AWS IP ranges to nginx, caddy, haproxy, nftables, iptables & ufw - single Go binary

detect technologies with wappalyzer alternative

Supply-chain firewall for AI coding agents and developers — checks npm/PyPI packages against OSV advisories, typosquat & lifecycle-script heuristics, and your policy before install. Local-first, MCP-native.

go-idento — a complete, embedded identity & authentication framework for Go (Golang). Users, roles, RBAC, password hashing, JWT (HS256/RS256/ES256 + JWKS), TOTP & SMS two-factor, OAuth/OIDC logins, sessions. Pluggable stores: GORM, pgx, sqlc.

A TypeScript library for validating and securing LLM prompts — PII, jailbreak, prompt injection, profanity, toxicity and relevance guards. Zero-config defaults, extensible with custom patterns.

Next generation web scanner

Core library

A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).

Security scanner built for Laravel, detects misconfigurations, vulnerabilities, and exposed secrets with a beautiful TUI.

Safeguard your .NET MAUI app effortlessly by preventing content exposure, screenshots, and recordings with ease.

Official Pulumi provider for Thoth headless control-plane workflows

[READ-ONLY] CakePHP Utility classes such as Inflector, Text, Hash, Security and Xml. This repo is a split of the main code that can be found in https://github.com/cakephp/cakephp

QuicDraw(H3) is A security research tool designed for fuzzing and racing HTTP/3 servers. QuicDraw implements the `Quic-Fin-Sync` on HTTP/3 (over QUIC) for race-condition testing.

Python implementation of Dropbox's realistic password strength estimator

CLI & Agent plugin for fetching SAST rule packs from greprules.io and scanning local code changes.

Nation-state grade, defense-in-depth security testing framework. Tests web apps, extensions, desktop, mobile, cloud, AI/LLM, hardware, and supply chain from a single CLI.

Verificação de assinatura de webhooks (Mailgun, SendGrid, Postmark, Resend, AWS SNS/SES) para Laravel

CLI vulnerability scanner powered by Vulners — search, audit, scan, offline mode

Secure-by-default runtime and security envelope for OpenClaw AI agents. Features sandboxing, granular permissions, and audit logging.

Опис репозиторію не опубліковано.

Prometheus exporter that enriches Trivy Operator VulnerabilityReport CVEs with EPSS scores and CISA KEV presence

Build plugin to use a nonce for the script-src directive of your site's Content Security Policy.