An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/parzibyte/cifrar-descifrar-php

Cifrar y descifrar datos con PHP usando la librería php-encryption; cifrar con clave general o con claves generadas por contraseñas de usuarios

crypto data decrypt encryption password php security

Last synced: 20 May 2026

https://github.com/cockroachlabs-field/cockroach-encrypted-stores

this is a draft of the blog Chris and Artem published on heterogeneous storage for the purposes of encrypting certain stores based on storage attributes. The article was published as https://www.cockroachlabs.com/blog/selective-encryption-tutorial-cockroachdb/

encryption security

Last synced: 20 Mar 2025

https://github.com/pwelch/urlvoid

Ruby Gem for URLVoid API

ruby security

Last synced: 11 Apr 2025

https://github.com/kdawgwilk/blind_index

Securely search encrypted database fields

ecto ecto-extension elixir elixir-lang privacy security

Last synced: 03 Apr 2025

https://github.com/ghalactic/provision-github-tokens

A GitHub Action that creates and rotates GitHub tokens for you

actions automation devops github-actions infrastructure-as-code provisioning security

Last synced: 11 Apr 2025

https://github.com/varmabudharaju/agent-pd

A police department for your Claude Code agents — a logging-only hook + CLI that audits the main agent and every subagent and reports rule offenses (permission bypass, out-of-scope & credential access, self-permissioning, disallowed tools, redundant, off-task) with quoted evidence. Catch-and-report, never blocks.

agent-monitoring ai-agents ai-safety audit-log claude-code cli developer-tools llm observability python security tamper-evident

Last synced: 02 Jul 2026

https://github.com/dimasma0305/wp-taint-scan

Go static taint-analysis engine that finds vulnerabilities in WordPress plugins — WordPress-aware (capability tiers, nonce≠authz, REST/AJAX entrypoints). Detects SQLi, XSS, IDOR, privesc, RCE. Built on php-parser-go.

appsec bug-bounty golang php sast security security-tools static-analysis taint-analysis vulnerability-scanner wordpress wordpress-plugin

Last synced: 30 Jun 2026

https://github.com/mitre/heimdall-baseline

(WIP) InSpec Profile for the Heimdall Application

heimdall inspec mitre-corporation security security-tools

Last synced: 16 May 2026

https://github.com/simplify-framework/security

This project aims to provide some basic security scan features for security assessments for Simplify Framework base projects.

aws-lambda secops security security-auditing-tool security-scanner

Last synced: 09 Jul 2025

https://github.com/gioragutt/scan-unverified-actions

This action scans actions used in your workflow files and outputs those that are unverified by github.

github-action javascript-action security

Last synced: 16 May 2026

https://github.com/arachne/verifier

Requirements verification for nette/application actions and components.

nette security

Last synced: 29 Oct 2025

https://github.com/krontab/cisco-hashgen

Generate and verify Cisco-compatible password hashes for Cisco ASA & IOS/IOS-XE.

asa cisco cli firewall networking one-way-hash-functions pbkdf2 router security switch type-5 type-8 type-9

Last synced: 30 Dec 2025

https://github.com/gbburleigh/mitreeval

A library for fetching, parsing, and analyzing MITRE evaluation results for EDR platforms.

attack edr mitre python security

Last synced: 03 Apr 2025

https://github.com/teyckmans/gradle-tink

Gradle plugin that provides encryption support for secrets using https://github.com/google/tink.

crypto cryptography gradle java kotlin security tink

Last synced: 10 May 2026

https://github.com/kaliforniagator/secshell-go

An implementation of SecShell now written in go with security features like command whitelisting and blacklisting built-in. It also uses sanitizing to ensure commands are clean from most injection attacks.

cyber cybersecurity go golang security shell

Last synced: 12 May 2026

https://github.com/matedev01/Joel_atecc608a

USB OTP Security System: A project combining the ESP32-S3 microcontroller, ATECC608A CryptoAuthentication device, Windows driver, and LibUSB for secure communication, OTP generation, and time synchronization. 🚀

driver esp32 esp32s3 firmware flash-encrypt hmac libusb otp secure-boot security usb visualgdb

Last synced: 29 Oct 2025

https://github.com/felipecosta09/cloudone-azure-integration-tool

Script to help integrate all your Azure subscriptions with Cloud One

azure cloudone security trendmicro

Last synced: 16 May 2026

https://github.com/flucium/hsum

hsum is a simple cli tool that compute the hash digest

cryptography hash hsum rust security sha2 sha3

Last synced: 18 Mar 2025

https://github.com/lirantal/aibom

An AI-BOM visual viewer

ai-agents aibom cli inventory sbom security snyk

Last synced: 06 Apr 2026

https://github.com/alexkander/loopback-visible-properties-mixin

Loopback mixin hidden all models properties and allow setup what should be visibles.

loopback mixin security strongloop website

Last synced: 27 Mar 2025

https://github.com/holley-studio/thesmos-governance

AI governance CLI, GitHub Action, VS Code extension & MCP server — 1,075 rules for Claude, Cursor, Copilot, Gemini, Codex.

ai-governance claude cli code-review cursor llm mcp nextjs security typescript

Last synced: 01 Jul 2026

https://github.com/wp-digital/wp-recaptcha

Helps to protect website with Google reCAPTCHA v3 or Cloudflare Turnstile.

recaptcha recaptcha-v3 security turnstile wordpress-plugin wp-digital

Last synced: 12 Apr 2025

https://github.com/dotanuki-labs/gradle-wrapper-validator

A validator for gradle/wrapper jar binaries, intended to be used in CI pipelines.

bitrise circleci cli github-actions gradle security supply-chain-security team-city

Last synced: 12 Apr 2025

https://github.com/kizzycode/ma_proper

This crate provides the cleaning memory allocator `MAProper`

memory-allocation memory-allocator memory-management security

Last synced: 16 Jun 2025

https://github.com/mefaay/face_recognition_system

A user-friendly face recognition system for adding individuals with photos, querying names, and identifying faces via uploaded images or live camera. Ideal for use in security, attendance, and monitoring systems. Includes detailed information display for recognized faces.

face-recognition opencv python security

Last synced: 20 Jan 2026

https://github.com/mmali3287/smartdoorbell

IoT-enabled smart video doorbell using AI face recognition, low-latency real-time streaming, MQTT communication and instant mobile notifications for secure access control.

cplusplus esp32 facerecognition firebase iot kotlin materialdesign ml motiondetection mqtt opencv pushnotifications python raspberrypi realtimevideostreaming security

Last synced: 07 Apr 2026

https://github.com/rdner/uncrypticated

cryptography in Go made easy as it should be

cryptography security

Last synced: 15 Dec 2025

https://github.com/gared/ether-scan

A security scanner for etherpad instances

etherpad etherpad-lite scanner security

Last synced: 11 Apr 2025

https://github.com/blue-davinci/socialaid

[Demo API] SocialAid Tracker is a Management Information System (MIS) designed to track beneficiaries of social protection programs. It enables efficient storage and retrieval of program details, household geolocation data, and household member information.

api backend golang rest-api security

Last synced: 15 May 2026

https://github.com/vars1ty/lxshadow

Password-checking binding around /etc/shadow

crate library linux linux-rust password rust rust-crate security shadow

Last synced: 16 May 2026

https://github.com/tiwarishubham635/easylocker

Generates Easy to remember Strong Passwords

password security

Last synced: 19 Jul 2025

https://github.com/emmaccen/webauth

Web Authentication API Demo

security webapi webauthn

Last synced: 29 Oct 2025

https://github.com/ojford/pam-credential-process

PAM module to set authentication token to output of arbitrary executable

authentication pam pam-authentication pam-module security

Last synced: 03 Apr 2025

https://github.com/authress/csharp-starter-kit

The Authress Starter Kit for C#.Net. Includes Authentication, Authorization, user identity and role management

api asp-net authentication authorization authress backend csharp dotnet mvc security service starter-kit

Last synced: 28 Dec 2025

https://github.com/untreu2/chaincrypt

A two-file dependent encryption mechanism written in Rust

encryption-decryption security

Last synced: 10 Jul 2025

https://github.com/nnamanx/nexpin

The online banking platform project is a comprehensive financial management system developed using Spring Boot, focusing on robust features such as user authentication, account management, financial transactions, and notifications.

gradle jpa lombok postgresql rest-api security spring-boot yaml

Last synced: 05 Apr 2026

https://github.com/acebot712/promptguard-python

PromptGuard Python SDK — Drop-in security for AI applications

ai-firewall ai-safety llm prompt-injection python sdk security

Last synced: 06 Apr 2026

https://github.com/webpro255/agentlock

The Open Authorization Standard for AI Agents. Framework-agnostic tool permissions, identity verification, scoped access control, and audit logging for any AI agent.

access-control ai-agents ai-safety authorization guardrails llm owasp permissions security tool-calling

Last synced: 06 Apr 2026

https://github.com/sinantech/jwt-authentication

🔐 This Application Contains JWT Authorization and Authentication Example From AmigosCode

authentication authorization filter java jsonwebtoken jwt security spring-boot

Last synced: 15 May 2026

https://github.com/trickfilm400/gitlab-security-scan-parser

CI/CD Job to analyize Application test files for GitLab's Free & Premium tier (as it is only available in Ultimate)

ci-cd cicd gitlab parser pipeline sast scanner security

Last synced: 12 May 2026

https://github.com/farrosfr/noa

A multi-layer content filtering and system hardening solution designed for high-performance blocking and un-bypassable enforcement.

blocker security

Last synced: 15 May 2026

https://github.com/haxurn/better-middleware

a framework-agnostic authentication middleware for Better Auth that provides robust session validation, intelligent caching, and comprehensive error handling for your backend routes.

auth better-auth middleware secure-routes security

Last synced: 15 May 2026

https://github.com/lookyman/security

Wraps PHP's password_* functions in authenticated encryption

encryption password security

Last synced: 23 Jun 2026

https://github.com/23seriy/devops-ai-workflows

Curated collection of AI-agent workflows, prompts & rules for DevOps/SRE — Kubernetes debugging, AWS audits, Terraform plan reviews, CI/CD triage, Dockerfile reviews, secrets scanning & incident response. Works with Windsurf, Cursor, Claude Code or any LLM.

ai-agent ai-workflows aws chatops cicd cursor devops docker incident-response kubernetes llm observability platform-engineering prompts security sre terraform windsurf

Last synced: 03 Jun 2026

https://github.com/parthur006/cisco-junior-cybersecurity-analyst-notes

Anotações e resumos da minha jornada de estudos na trilha de carreira Junior Cybersecurity Analyst, conectando desenvolvimento de software com segurança da informação.

ccst cisco cyber-threat-management cybersecurity endpoint-security ethical-hacking infosec network-defense networking redes security seguranca-da-informacao study-notes

Last synced: 16 Feb 2026

https://github.com/wakeful/trick

Tactician of Role-Interchanging Cloud Keys (Effortless AWS persistence via AssumeRole).

aws penetration-testing readteam red red-team redteam-tools security security-automation security-tools

Last synced: 15 May 2026

https://github.com/hown3d/image-checker-k8s

A tool to update your kubernetes containers to newest Digest SHA in Container Registry

containers kubernetes security

Last synced: 28 May 2026

https://github.com/kingkyylian/linwarden

Rootless Linux host inventory and hardening audit CLI

cli devops hardening linux python sarif security sysadmin

Last synced: 15 May 2026

https://github.com/JuliaAPlavin/SQLCipher.jl

Drop-in replacement for SQLite.jl, using the sqlcipher library for full encryption support.

database encryption security sqlcipher sqlite

Last synced: 06 Apr 2026

https://github.com/drincann/cry0

A lightweight CLI for generating cold wallets, managing keys, and signing cryptocurrency transactions offline across multiple blockchains.

bip32 bip44 bitcoin blockchain cli cold-wallet ethereum security wallet wallets

Last synced: 12 Jul 2025

https://github.com/sztheory/favicheck

Detect a site's web framework from their favicon

favicon go golang owasp security web-framework

Last synced: 14 Dec 2025

https://github.com/msmia76/azure-arm-lakehouse-demo

End-to-end Azure Lakehouse + Operational Analytics demo with IaC (Bicep/ARM), secure data landing (ADLS, Fabric, Synapse), and can’t-mess-it-up automation (Cosmos upserts + DevOps). Scales with skills, satisfies auditors, and proves automation can be boringly reliable (that’s the point). Runs cleanly every time ... even under interview pressure.

adls arm automation azure bicep cosmosdb data-engineering demo fabric iac powerbi security synapse

Last synced: 01 Jul 2026

https://github.com/flxn/django-csp-observer

CSP Observer is a Django app that detects and informs your website visitors about potential security issues in their browser.

browser csp django privacy security

Last synced: 28 May 2026

https://github.com/aicent-stack/rpki

AI-native Zero-Trust security layer. Parallel tensor watermarking and RPKI-based identity attestation. 300µs quarantine for malicious pulses.

ai ai-infra aicent depin embodied-ai gtiot low-latency rpki rttp rust security sovereign-ai zcmk zero-trust zero-trust-ai

Last synced: 06 Apr 2026

https://github.com/terraformtoolbox/terraform-aws-iam-account-password-policy

A terraform module for managing AWS IAM account password policies.

aws aws-iam aws-iam-policies security terraform terraform-module wolfsoftware

Last synced: 17 Mar 2025

https://github.com/doctena-org/octorules-google

Google Cloud Armor provider for octorules

cloud-armor firewall gcp iac octorules security yaml

Last synced: 06 Apr 2026

https://github.com/ecgalaxy/ca_certificates

Ansible role which installs ca-certificates and adds CommisSign certificates to the trusted CAs list - Repository mirror - development takes place on code.europa.eu

ansible-role ca-certificates security

Last synced: 13 Apr 2025

https://github.com/rix4uni/cspfinder

Discover new target domains using Content Security Policy

bugbounty content-security-policy csp golang hacking recon reconnaissance security

Last synced: 02 Feb 2026

https://github.com/ishanoshada/lockix

A secure file encryption and decryption tool

cryptography encryption files security

Last synced: 07 Mar 2026

https://github.com/badchars/darknet-mcp-server

66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, exploit search, stealer logs

ai-agent breach claude cybersecurity dark-web darknet exploit malware mcp model-context-protocol osint ransomware security stealer-logs threat-intelligence tor

Last synced: 30 Jun 2026

https://github.com/badchars/supply-chain-mcp-server

90-tool MCP server for software supply chain security — OSV, GHSA, NVD, EPSS, CISA KEV, npm, PyPI, crates.io, RubyGems, NuGet, Packagist, Go, deps.dev, Scorecard, Rekor, ClearlyDefined, Repology, typosquatting detection

ai-agent claude cve dependency-security llm mcp model-context-protocol npm-security openssf osv pypi sbom scorecard security sigstore software-composition-analysis supply-chain supply-chain-security typosquatting vulnerability

Last synced: 30 Jun 2026

https://github.com/badchars/steganography-mcp

128-tool MCP server for steganography analysis — LSB detection, chi-square steganalysis, RS analysis, JPEG/F5/JSteg/OutGuess detection, BPCS, video & GIF stego, network covert channels, MP3 stego, spread spectrum, archive stego, QR code analysis, audio stego, text encoding, file forensics. 100% offline, zero API keys.

ai bpcs claude cli ctf digital-forensics forensics image-analysis lsb mcp model-context-protocol mp3-steganography network-steganography qr-code security spread-spectrum steganalysis steganography typescript video-steganography

Last synced: 30 Jun 2026

https://github.com/bug-ops/exarch

Secure archive library: TAR/ZIP/7z extraction & creation with CVE protection. Type-safe Rust core, Python/Node.js bindings, zero unsafe code.

7z archive cli compression cve-protection extraction library memory-safe napi-rs nodejs path-traversal pyo3 python rust security tar zip zip-bomb

Last synced: 06 Feb 2026

https://github.com/brend-smits/ratchet-dispatcher

Ratchet Dispatcher can be used to execute ratchet on target repositories, allowing for central deployment

cicd dependencies ratchet secure-software-supply-chain security sssc

Last synced: 05 Jul 2025

https://github.com/robsd/js-password-generator

A password generator application written in JavaScript with the option of 8-128 character passwords consisting of letters (lowercase and uppercase), numbers and symbols.

app application bootstrap bootstrap5 cyber cyber-security generator html html5 javascript js password password-generator security tool web

Last synced: 15 May 2026

https://github.com/wasserja/mracredential

A PowerShell module to save and import encrypted credential files from disk.

automation powershell security

Last synced: 17 Jun 2025

https://github.com/megamansec/ccbot

Python3 script to periodically check and parse https://chromereleases.googleblog.com/ for any vulnerability announcements for Chrome/Chromium Desktop.

chromium security

Last synced: 13 Apr 2025

https://github.com/ek33450505/homebrew-cast-security

Homebrew tap for cast-security — brew install cast-security

cast claude-code homebrew security

Last synced: 11 Jun 2026

https://github.com/zxc7563598/php-google-authenticator

一个用于生成和验证时间基础一次性密码(TOTP)的 PHP 包,支持 Google Authenticator 及类似应用。功能包括密钥生成、二维码创建和 OTP 验证 | A PHP library for generating and verifying Time-Based One-Time Passwords (TOTP). Compatible with Google Authenticator and similar apps, with features like secret generation, QR code creation, and OTP verification

2fa authentication composer google-authenticator otp php qr-code security totp

Last synced: 03 Aug 2025

https://github.com/rounak-k-jha-2002/passbit.dev

A Secure Password Manager App at Your Fingertip with modern UI and interactive UX.

dart flutter-apps password-manager security

Last synced: 17 Mar 2025

https://github.com/aggstam/safeshop

Simple e-shop with a lot of security features, using Spring MVC.

html-css-javascript java security shop

Last synced: 11 Jul 2025

https://github.com/shellrow/webscan

Cross-platform web scan library

rust rust-crate rust-library scanner security web

Last synced: 10 Apr 2025

https://github.com/nanaelie/http-headers-collection

EN: A simple and practical collection of HTTP headers with recommended values, effects, and related security risks. FR : Une collection simple et pratique d’en-têtes HTTP avec leurs valeurs recommandées, effets et risques de sécurité associés.

api-security best-practices cheatsheet collection devsecops headers headers-collection http http-headers infose markdown open-source security security-headers web web-dev web-security

Last synced: 19 Jun 2025

https://github.com/clats97/clatsguard

Secure your documents with this Python AES-256-GCM file encryptor featuring PBKDF2-HMAC key derivation, passphrase-based or hex key usage, and a Tkinter GUI for user-friendly encryption. Open-sourced. This project was peer reviewed by a CompTIA Security+ person.

aes256 aes256-gcm cryptography encryption encryption-decryption file-encryption python security trending

Last synced: 03 Apr 2025

https://github.com/gianlucatruda/nis-encrypted-messaging

A demonstration of security principles for peer-to-peer communications of sensitive content.

aes-encryption cryptography messaging python3 rsa-cryptography security

Last synced: 03 Apr 2025

https://github.com/zhanxu33/security

Security

security

Last synced: 16 Feb 2026

https://github.com/fijimunkii/aws-security-audit

Scripts for security audit of AWS account

audit aws security

Last synced: 15 May 2026

https://github.com/melthaw/spring-security-token

Sometimes we only need a simple token based security framework to protect the rest API. Obviously Spring Framework is great but Spring Security is too heavy to us. It's possible to extends the Spring Security to match our requirement, but that means we have to pay the cost for the over-designed filter chain at the runtime. Spring-Security-Token is designed to reduce down the filters in the chain ,abandon the complicated structure , and try to make it simple , make it easy to understand.

java security spring

Last synced: 29 Apr 2025

https://github.com/felipecosta09/aws-modernization-with-cloud-one-fss

In this workshop, you will learn how to scan your files in S3 buckets for malware and integrate into your custom workflows, by automating with your current resources, directly in your AWS environment. Using Trend Micro - Cloud One, AWS S3, AWS Lambda, AWS SQS, AWS SNS and AWS Cloud Formation, you’ll get hands-on experience implementing an automated Cloud Formation security stack to provide Data Security capabilities to your S3 buckets.

aws cloudone filestorage s3 security trendmicro

Last synced: 02 Apr 2025

https://github.com/vvv-keys/aishadow-malware-labs

AI-assisted malware simulation labs for red team research - content redacted for obvious reasons. Will be updating and applying in due time. Join community for demonstrations/practice.

ai autonomous cyber cybersecurity lab malware offense research security simulation testing warning

Last synced: 11 Jul 2025

https://github.com/bvolpato/promptcloak

Local OpenAI-compatible proxy and Python library that redacts secrets before prompts leave your machine.

llm openai privacy proxy redaction security

Last synced: 30 Jun 2026