#security

Authentication system for Node.js

Local inventory of the AI agent surface on your machine. No account, no network, no upload.

CI/CD pipeline security analyzer — scans GitHub Actions workflows for attack vectors and maps findings to MITRE ATT&CK

Scan your codebase for AI slop. Get a Slop Score. Ship clean. A zero-dependency CLI (85 detectors: security, performance, code-quality, design tells) + a 181-pattern Anti-Slop Protocol for AI coding agents.

该仓库未发布描述。

Production-ready detection & response queries for osquery

The identity provider for AI agents — registry, scoped delegation, in-path MCP enforcement, instant revocation, tamper-evident audit.

Golang (GO) implementation of Javascript Object Signing and Encryption specification

Embeddable Better Auth-shaped authentication server for Go: net/http, secure sessions, OAuth/OIDC, passkeys, 2FA, organizations, and pluggable database adapters.

Two-factor authentication for Laravel Nova 5: TOTP, passkeys, email codes, enforcement policies and step-up re-auth.

Client-side, cross-host pre-push gate that catches PII and secrets — using an engine you choose — before anything reaches a public remote.

Added Laravel functionality to Enlightn Security Checker. Adds a command to check for, and optionally emails you, vulnerabilities when they affect you.

Browser-only privileged access management (PAM) for Linux fleets — SSH through a jump host with ephemeral SSH certificates, session recording, and tamper-evident audit.

Go client library for the Vulners vulnerability database API — search, audit, SBOM, VScanner, and more

Captcha for Laravel 5+

Authentication provider for Microsoft AD FS to use with privacyIDEA.

该仓库未发布描述。

Library with common purpose functionality for working with .NET.

该仓库未发布描述。

HTTP authentication library for Go servers with Bearer, API key, OAuth/JWT, OIDC auto-discovery, JWKS refresh, and OAuth proxy support.

A set of core libraries for building domain-driven business applications on .NET.

AI security gateway that inspects every prompt and response through a multi-layer detection pipeline - enforcing ALLOW, BLOCK, or SANITIZE before anything reaches the model.

An OSINT / digital forensics tool built in Python

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

Majik Key is a next-generation seed phrase account library for creating and managing mnemonic-based identities. It provides a post-quantum ready, high-security bridge between BIP39 mnemonics and the Majikah ecosystem.

A lightweight PHP library for generating and validating TOTP authentication codes and QR codes compatible with Google Authenticator, Microsoft Authenticator, Authy, 1Password, Bitwarden, and other RFC 6238 authenticator apps.

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

Stoffel network (brand new) (super cool)

Proof-carrying defensive security reviews for AI-assisted software, with deterministic policy, portable evidence, and human review required.

Official Terraform provider for the Thoth headless control plane