#security

A cross-platform CLI to interact with an OpenFGA server

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

Weighs the soul of incoming HTTP requests to stop AI crawlers

A vulnerability scanner for container images and filesystems

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

Open source AI terminal for cloud and infrastructure management, enabling you to deploy, troubleshoot, and automate services using natural language and intelligent agents.

CLI to install, manage & troubleshoot Kubernetes clusters running Cilium

Deploy custom push protections and policies on top of Git

Simple and flexible tool for managing secrets

Boundary enables identity-based access management for dynamic infrastructure.

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

open source, cloud-native, graph-based query language

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

A Sigstore client written in Python

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

Software Supply Chain Transparency Log

Kubernetes-native security toolkit

Implementation of the Cedar Policy Language

Security Scanner for Agent Skills

Keep track of failed login attempts in Django-powered sites.

Backend for HTTP Observatory on MDN

Built-in Panther detection rules and policies

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

IAM Least Privilege Policy Generator

Go security checker