#security

Dradis Framework: Collaboration and reporting for IT Security teams

Basic rate-limiting middleware for the Express web server

Diki is a compliance checker that aims to enhance the security posture of your Kubernetes clusters.

The authentication glue you need.

Official IVPN Desktop app

A powerful obfuscator for JavaScript and Node.js

Fast and efficient osquery management

Your sats. Your privacy. Your profit.

The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines

Secure Boot & Measured Boot for NixOS [maintainers=@blitz @raitobezarius @nikstur]

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

Security-focused Laravel static analyser

Guard Core - API Security Core Engine for FastAPI-Guard adapter, FlaskAPI Guard adapter and DjAPI Guard adapter

Static scanner for MCP-connected AI agent pipelines. 348 rules across 14 categories, 14 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

Rust Agent Development Kit (ADK-Rust): Build AI agents in Rust with modular components for models, tools, memory, realtime voice, and more. ADK-Rust is a flexible framework for developing AI agents with simplicity and power. Model-agnostic, deployment-agnostic, optimized for frontier AI models. Includes support for real-time voice agents.

Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 commands, 246 MCP tools, change-safety gates, audit evidence, zero API keys.

The most flexible and standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core

Open-source secret & environment management. Secure, simple, collaborative. CLI & Github Sync

Keeper Secrets Manager is a cloud-based, zero-knowledge platform for securing infrastructure secrets. Provides automatic password rotation and integration into popular DevOps CI/CD tools.

OWASP Foundation web repository

Solidity library of encrypted contracts using Zama's FHEVM

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.

Map a domain's public technical footprint with provenance, confidence, and explicit uncertainty. Passive by default, machine-readable, and built to report evidence, not guesses.

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

A policy enforcement runtime for AI agents

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning

With Django Hijack, admins can log in and work on behalf of other users without having to know their credentials.

ESLint rules for Node Security