#security

㊙️ AntiXSS | Protection against Cross-site scripting (XSS) via PHP

A lightweight, user-friendly web interface for managing Caddy as a reverse proxy. It simplifies SSL management and host routing for self-hosters who want the power of Caddy without the manual configuration.

Verifies file integrity by comparing to published checksums.

🛡️ Modern Python code obfuscator - Enterprise-grade protection at 50% lower cost than PyArmor

Agent Beacon is the world's first open-source telemetry layer for AI agents wherever they run: locally, in CI, or in the cloud.

Detect phantom IAM users, decode leaked AWS Bedrock and Claude Platform API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rules.

Edge login screens for React Native

Drop-in authentication for Go: Argon2id passwords, EdDSA JWTs with refresh rotation, opaque API keys, OIDC + OAuth2 social login, email + username validation — secure by default, zero boilerplate.

A GitHub Action to run the grype vulnerability scanner against your code repository and create a badge

A secure JavaScript sandbox designed for safe AI agent code execution. Protects against code injection, prototype pollution, and sandbox escapes. The security layer that makes AI-generated code safe to run.

AI EDR for developer workstations and autonomous agent fleets. Build Swarm Detection & Response platforms with Clawdstrike.

Developer-first security scanning orchestration — describe your app in one file, run many scanners (SAST, SCA, secrets, IaC, containers, headers), get one SARIF verdict for CI & code scanning.

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

MCP package manager with built-in trust scoring. Search, install, and audit MCP servers across Claude Desktop, Cursor, VS Code, and Windsurf.

A Go-based proxy that provides transparent encryption/decryption for S3 objects with envelope encryption.

A nearly complete implementation of the UniFi Protect API.

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and local-first.

KubeArmor cli tool aka kArmor :robot:

Chronicle - Verifiable Audit Logging and Append-Only Audit Trails for Laravel.

Community Auth System for self-hosted Dagster OSS - simple RBAC, Audit-log, and Session Management

Microsoft Security DevOps for GitHub Actions.

Simple extension that provides Basic, Digest and Token HTTP authentication for Flask routes

Canonicalize and neutralize adversarial Unicode — homoglyph/bidi/zalgo/invisibles — before it reaches your classifiers, indexes, and identifiers

The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.

Provides a TOTP-based authentication method for the Silverstripe MFA module.

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.

A utility for managing Cloudflare Security settings

A library for various security related utility methods

A validation module for validating HTTP Basic Authentication credentials in Functions.

Secure MCP server for whitelisted shell command execution with stdin, argv pipelines, timeouts, and structured audit logging.