#security

Security AI trainer/tuner and research toolkit. Fine-tune LLMs on MITRE ATT&CK-grounded data (QLoRA, GaLore, DeepSpeed, FP8, BitNet). 24K+ training pairs, 18 sources, 100% per-record provenance. Inversion-audit harness (Carlini 2021, 2022; MUSE 2024; LiRA). Terminal GUI for SSH use. 368+ tests.

A universal security-by-default framework for Model Context Protocol (MCP) servers that provides multi-layered defense against traditional attacks.

Codebase intelligence shell and SDK — pip install jsat

MCP governance proxy - zero-dependency single binary (Go)

Passlib fork

Safe archive-reader for ZIP-derived formats (ZIP, CRX, JAR, APK, IPA) with BOM-safe checks.

Safe archive-reader for ZIP-derived formats (ZIP, CRX, JAR, APK, IPA) with BOM-safe checks.

A Pi-native extension for thorough, agentic security audits

JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。

A simple identity and access control implementation.

Secrets that refuse to be stolen. Sealed API keys that decrypt only on your allowlisted repo — and raise a security error if anything tries to print, iterate, or read them. Every access attempt alerts the owner.

dj - Dynamic JS File Extractor - intelligently detects dynamically loaded JavaScript files by statically analyzing website HTML and JS code

MCP server — read-only log access for AI assistants. Debug your Linux server with AI, without giving the AI shell access.

该仓库未发布描述。

Async Rust-based secure file sanitization engine for images and videos using CDR pipelines.

Collection of ssl verification functions for Erlang

Graph-based cloud security analysis tool that shows attack paths and blast radius across Kubernetes and AWS.

C# implementation of the ALTCHA challenge.

Sift real security risk from the noise — a cross-platform CLI that live-validates leaked secrets and reachability-ranks npm/Yarn vulnerabilities, so you fix what's actually exploitable.

Your AI remembers what it did, proves it, and gets smarter every session

Sensitive is a middleware for GoFiber to blind sensitive value like mobile no, citizen id, etc. by defined configuration. Useful for security policies.

[READ ONLY] A generic interface to implement two-factor authentication in Symfony applications

Pure-Go CLI that scans APK files for leaked secrets. Zero dependencies, gitleaks-compatible rules, CI-friendly exit codes.

This is a Nodejs Module To prevent SSRF based attack's. Blocks request to Private IP and mitigate from further Bypass

该仓库未发布描述。

Simple sdt only otp in memory manager

SeamShield Community CLI: local-first access-lane scanning for AI-built apps

Security linter for a-h/templ: detects XSS-prone htmx / Alpine.js usage by parsing .templ files directly with parser/v2

Recon tool for pentesters & bug bounty hunters: check robots.txt, security.txt (RFC 9116) and /.well-known/ across many targets. CLI + web UI, single static Go binary.

Build a complete authentication system in NestJS — without Firebase or Auth0. nestjs-multi-auth is a self-hosted identity provider that handles: JWT + refresh tokens OAuth (Google, Facebook, Apple) Magic links (passwordless login) MFA / 2FA (TOTP) Account linking (multiple login methods per user)