#security

Lightweight, fast, and secure TOTP (2FA) authentication library for PHP — battle tested, dependency free, and ready for enterprise integration.

Wispers Connect client library — secure, NAT-traversing, peer-to-peer connections. Rust core with wrappers for many languages.

Go library for BloodHound structured OpenGraph, the kind the UI can do pathfinding on. Payloads, extension definition schemas, and signed API requests. Standard library only.

Secret Scanner for Slack, Jira, Confluence, Asana, Wrike, Linear, Zendesk, GitHub, and GitLab

Create and validate signed URLs with a limited lifetime

Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.

Rust implementation of The Update Framework (TUF)

Deep artifact scanner for cloud-native environments. Find secrets hiding in container images, Helm charts, Kubernetes manifests, and nested archives.

VMware NSX DFW microsegmentation and security: distributed firewall, security groups, tags, traceflow, IDPS — MCP tools for AI agents

A library and SDK to redact sensitive content from GenAI/LLM telemetry (prompts, completions, tool arguments) before it reaches observability backends. Supports OpenTelemetry conventions.

CogNEXUS Labs builds the infrastructure that makes autonomous AI accountable to the enterprise. Our product, Artzain is the model-agnostic Agent Control Plane for autonomous systems. Here's the SDK

A flexible proxy for inspecting & transforming LDAP packets generated by any tool on the fly.

Lightweight prompt injection detection for LLM applications

该仓库未发布描述。

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.

Cryptographic Discovery Scanner - Find every cryptographic algorithm in your codebase and know your quantum risk - part of the QRAMM Toolkit by CSNP

libsodium for .NET - A secure cryptographic library

Web surface for milpa/live — HTML renderers + security-hardened LiveEndpoint. Apache-2.0.

Codebase intelligence shell and SDK — pip install jsat

Detect hidden Unicode attacks in source code before they fool you.

The open-source toolbox for HSM health, security posture and PKCS#11 diagnostics.

Unofficial Go client for the Have I Been Pwned API v3 — library, CLI, HTTP JSON server (Docker image), and FrankenPHP PHP extension, with Pwned Passwords k-anonymity checks.

Manage NetBird resources declaratively using Pulumi's infrastructure-as-code framework.

Pin your GitHub actions to a specific hash

An async security library for the Sanic framework.

netxfw standalone xdp安全防火墙 简单 小主机

S3 auditor for codebases and AWS. Scans repos for S3 bucket/object references, compares against AWS, detects missing buckets, unused buckets, stale objects, and suspicious versioned files.

Actively maintained, security-hardened fork of Gophish — the open-source phishing toolkit

ASM2HEX 是一款功能强大的汇编语言与十六进制机器码相互转换工具。它提供了一个直观的图形界面,让用户可以轻松地在汇编指令和对应的机器码之间进行转换。无论你是处理 ARM64、ARM 还是 Thumb 指令集,ASM2HEX 都能提供准确可靠的转换结果。ASM2HEX is a powerful tool for bidirectional conversion between assembly language and hexadecimal machine code.

Firma digital en Facturación Electrónica