#security

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)

Protect your SIP Servers from bad actors at https://sentrypeer.org

🩺⚡ Runtime Doctrine ORM analysis integrated into Symfony Web Profiler. Detect N+1 queries, security vulnerabilities, and performance issues during query execution.

🤔 Is this Web request from a real search engine🕷 or from an impersonating agent 🕵️‍♀️?

DTLS 1.2/1.3 implementation (Sans‑IO, Sync)

GDPR, WCAG 2.2 AA, and EAA compliant, self-hosted CAPTCHA alternative with PoW mechanism.

Allows Buildkite agents to use ephemeral GitHub tokens to authenticate their interactions. Avoids deploy keys and long-lived PATs.

Keep your Go outbound requests off private networks and cloud metadata, even under DNS rebinding

Egress filtering for containers, Kubernetes pods, and GitHub Actions runners.

Move OIDC token acquisition out of your app code and into the Istio mesh

OIDC (OpenID connect) focused auth module for Nuxt

Linux audit userspace repository

Automatically scan AUR packages for malware before installing (using LLM/AI)

Cleans HTML to avoid XSS attacks

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

One scan for AI risk. `opena2a review` checks an AI project across credentials, shadow agents, MCP servers, and dependencies, returns a score, and routes each finding to the tool that fixes it. Open source.

PASETO (Platform-Agnostic SEcurity TOkens) for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes

Open-source firewall for AI agents. Policy engine that audits and controls what OpenClaw, Claude Code, Cursor, Codex, and any AI tool can do on your machine.

Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.

Provides a TOTP-based authentication method for the Silverstripe MFA module.

Go SDK to enable your Go application to create GitHub User Access Tokens for GitHub Apps easily

Encrypted HTTP Body Protocol (EHBP) encrypts the HTTP request and response body with HPKE

Java implementation of Tink

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.

Local-first personal agentic OS and everything app for coding, knowledge work, web design, automations, and artifacts.

Database anonymization and test data management

.Net and PowerShell version of Keeper Commander, a CLI and SDK interface for the Keeper Security platform.

MCP server for SCF Controls Platform — security compliance controls, frameworks, evidence, and risk management for AI agents

Content security policy manager for Umbraco