#security

Cage untrusted MCP servers in containers, compose them into agents, and share them over any OCI registry. Signed, sandboxed, no Docker required.

Engineering-first HTTP backend library for Go focused on performance, security, and production-ready architecture.

Animated Font and CAPTCHA library for Go — invisible in any single frame, only readable in motion. Resists OCR and AI vision models.

Safe archive-reader for ZIP-derived formats (ZIP, CRX, JAR, APK, IPA) with BOM-safe checks.

simple encrypted (streaming) values

strongDM SDK for the Python programming language.

Simple to use, easy to deploy 2FA login for OpenVPN servers

Spin up secure, throwaway multi-node cloud test clusters — CPU or GPU — for distributed C++/IPC software. One command up, nothing left behind.

Direct, verified file transfer between two computers on the same network. No account, cloud, relay, or persistent trust. Go, TLS 1.3, mDNS.

High-precision secret scanner for code, tickets, logs, and web app with ml validation

BOB — Bodyguard Of Bits: Linux hardening auditor with CIS benchmark mapping

Zero-dependency, DOM-free, pure predicate for detecting unsafe strings across HTML, XML, SVG, SQL, SHELL, NOSQL, and REGEX contexts

CVE/NVD lookup with offline CVSS scoring in DuckDB (Go)

Fast concurrent TCP/UDP port scanner in Go with Lua plugin support

MIMEDefang is an e-mail filtering tool that works with the Sendmail “Milter” library. MIMEDefang lets you express your filtering policies in Perl rather than C, making it quick and easy to filter or manipulate your mail.

Monolog processor to keep sensitive data and secrets out of your logs

CrowdSec is an open-source cyber security tool. This plugin blocks detected attackers or display them a captcha.

Complete reverse-skill (87 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.

Open source toolkit created to enable easy adoption of software enclaves

本地优先的密钥管理工具 - 按多级分类存取 token/密码，SQLite 本地库配合 Fernet 加密，可与 MySQL 等数据库双向同步

client and types for garnet platform

Secure headers extension for your Yii2 application

A simple Rust crate to drop privileges

🍯 Unobtrusive and flexible spam protection for Rails apps

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltration. MIT licensed.

phpMussel front-end (dedicated Composer version).

A library which generates random passwords with different settings to meet the OWASP requirements

Fast security-aware file tree walker - gitignore, binary detection, memmap2, parallel

Process sandbox for untrusted code - Linux namespaces, firejail, bubblewrap, watchdog timeout