#security

A nearly complete implementation of the UniFi Protect API.

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and local-first.

Keycard Python SDK

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries

Infrastructure access broker for AI agents — SSH & Kubernetes. Per-operation ephemeral credentials minted by a separate signer; the model never touches one. MCP stdio / HTTP+OIDC.

该仓库未发布描述。

📝 Generating, validating and processing secure forms in PHP. Handy API, fully customizable, server & client side validation and mature design.

A library that removes common unicode confusables/homoglyphs from strings.

Role and Attribute based Access Control for Node.js

Store, share, and resume AI coding sessions.

An easy-to-learn/use static analysis framework for Java and Android

An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .

A modular, drop-in middleware collection for Laravel AI SDK agents. Offers middleware across security, observability, performance and guidance.

The immune system for AI coding agents

tethered - Runtime network egress control for Python. One function call to restrict which hosts your code can connect to.

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.

Rust implementation of DNP3 (IEEE 1815) with idiomatic bindings for C, .NET, C++, and Java

The secure gateway connecting AI agents to enterprise systems.

SecURL - passive external security posture scanner. Free hosted scanner, open-source engine, CI integration

Spot vulnerabilities in postgres SQL scripts

Secure MCP server for whitelisted shell command execution with stdin, argv pipelines, timeouts, and structured audit logging.

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

Benchmarking tool for Rust functions on mobile devices using BrowserStack.

Per-project secrets in local KeePassXC vaults, injected into commands without ever printing them. Agent-safe: PreToolUse guard hook + read-only MCP server. Single Go binary.

Inofficial port of https://web.archive.org/web/20180126072328/http://wpl.codeplex.com/ to .NET Standard 2.0

Strip common prompt injection surfaces.

A CMS Administration interface for managing security headers for Optimizely CMS Traditional and Hybrid builds.

High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.

Runs Secretlint from ESLint and adds Secretlint-specific config authoring rules.

AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.