#security

🔐 The password manager for terminal users and AI agents. Age-encrypted, keyring-cached, MCP-ready. Zero telemetry.

Evervault JavaScript SDK.

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Help secure Express apps with various HTTP headers

in2publish Community Version

NFTBan is an open-source Linux Intrusion Prevention System (IPS) and firewall manager built on nftables, designed to integrate cleanly with modern Linux security stacks.

Runtime security for AI agents: discover agents, map their permissions, and enforce what they can do.

该仓库未发布描述。

Terraform Mondoo provider

☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.

Web Application Firewall (WAF) for Kubernetes Gateways

The IAM layer for AI agents: cryptographic identity, capability authorization, and audit trails for non-human identities. Open source.

AI-powered offensive security testing using autonomous agents, directly in your terminal.

Nalix — A low-latency binary networking framework for .NET game servers and realtime systems (Native AOT compatible, source generators, binary packet protocol, cross-platform).

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.

An OOB interaction gathering server and client library

🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework

Security-first remote Docker agent — authenticated Docker API proxy with outbound edge mode, Ed25519 per-request auth, and a cosign-signed, scratch-based supply chain. Drydock-native + generic REST.

Dark Web OSINT Tool

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

Inject OWASP recommended HTTP Headers for increased security in a single line

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Web UI testing toolbox for Orchard Core applications with Selenium. It discovers so many issues that you'll get impostor syndrome.

Core utilities for Socket security tools

Optimized package overrides for Socket Optimize

Python SDK for the Socket API

A modular JWT library for Go, based on IANA specifications.

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

⚡ Stop IAM misconfigurations before they become breaches — Catch overprivileged permissions, dangerous wildcards, and policy errors before deployment.

JavaScript SDK for authorization via Cerbos