#security

Rust implementation of the Messaging Layer Security (MLS) protocol

Quick and simple security for Flask applications

Supercharge AI Agents, Safely

Security scanner for AI agents, MCP servers and agent skills.

Sōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome!

🧱 Easy fast local-first microVM runtime and library

Go implementation of The Update Framework (TUF)

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.

OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI

The cross-harness, self-improving memory layer for AI agents. Join our community: https://discord.com/invite/zdNChS2fBu

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

A YubiKey SDK for .NET developers

The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

OAuth 2.0 social authentication providers for ASP.NET Core

该仓库未发布描述。

npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

Suite of tools for Monitoring OP Stack Chains 🔴 Offers real-time detection and Incident response capabilities ✨

A standalone exporter for vulnerability reports and other CRs created by Trivy Operator (formerly Starboard) and Kubescape.

JSON Web Token implementation in Python

.NET code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oasis-tcs/sarif-spec)

Monero: the secure, private, untraceable cryptocurrency

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

Security scanner for AI/ML model files. Detects malicious code, backdoors, and vulnerabilities before deployment

RustSec API & Tooling

sbomify is a product security artifact hub and a trust center.

Cross-platform developer workstation control plane powered by chezmoi — adaptive terminal themes, AI CLI workflows, read-only MCP, WASM attestations, encrypted secrets, and SLSA-verified releases.