An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/robbdimitrov/apiproxy

Keeping API client secrets out of the frontends and decorating the requests in the proxy

expressjs nodejs proxy security

Last synced: 15 Apr 2026

https://github.com/fahima-anny/smart-pick-client

You can have a look of recommendations others has made, for the product query you have made . You can make recommendations on others query , view all recommends you have made and also can delete them if you want

daisyui express firebase-auth jwt-authentication mondodb nodejs react security tailwind vite

Last synced: 04 Apr 2026

https://github.com/vellaveto/vellaveto

Agentic security control plane for MCP and AI agent tool calls. Policy gateway, topology discovery, identity-aware ABAC, and tamper-evident audit.

ai-agents audit compliance mcp owasp policy-engine rust security

Last synced: 16 Mar 2026

https://github.com/so1icitx/protonmail_authority_honeypot

proton mail IS NOT as secure as you think

honeypot mail opsec proton protonmail security

Last synced: 09 Feb 2026

https://github.com/axrobert/vps

🛡️ Virtual Private Servers [ Config + Hardening ]

centos debian hardening private security server ubuntu virtual vps

Last synced: 13 Jun 2026

https://github.com/akacase/dns-compliance-testing

flake for dns-compliance-testing

dns nix security

Last synced: 11 Jun 2026

https://github.com/mofneko/riddle

Riddle is debugger attach tracking agent for Android.

android-library security unity3d-plugin

Last synced: 22 Apr 2026

https://github.com/roabraham/genpass

This free application lets you generate hard-to-hack passwords. The generated passwords can easily be customized to fit your needs, you can even generate serial numbers for your own applications with it.

password-generator security

Last synced: 13 Jun 2026

https://github.com/mario-so/sec-eth

Your go to resource library for learning smart contract security.

blockchain ethereum security

Last synced: 22 Apr 2026

https://github.com/bethanyuo/solidity-security

Exercises pertaining to various Smart Contract vulnerabilities.

attacks honeypot security short-address smart-contracts vulnerabilities

Last synced: 19 Mar 2026

https://github.com/liberatti/ipxa

IP Reputation and Network Intelligence Monitoring

api-rest ip-information network-security security security-feeds

Last synced: 01 Jun 2026

https://github.com/mehmettopcu/oslo.policy.remote

Remote Policy Checker for Oslo Policy - A Python package that enables remote HTTP-based policy checking, allowing policy decisions to be made by a remote service. Works with goslo.policy.server for centralized policy enforcement in OpenStack services.

authorization microservices openstack oslo policy rbac rest-api security yaml-configuration

Last synced: 15 Feb 2026

https://github.com/tartinerlabs/lockfile-integrity

Detects lockfile changes without corresponding package.json modifications — a supply chain tamper signal

bun github-actions lockfile npm pnpm security supply-chain-security yarn

Last synced: 23 Apr 2026

https://github.com/meblabs/security-workflow

Reusable GitHub Actions workflow for the MEBlabs open-source security gate.

github-actions security

Last synced: 14 Jun 2026

https://github.com/moldable-ai/aivault

Stop giving untrusted agents direct access to API keys

agents ai security vault

Last synced: 23 Apr 2026

https://github.com/chavatte/sentinel-ops

🛡️ Universal Node.js Security & Dependency Auditor (NPM/Yarn/PNPM). Automated CVE detection, Supply Chain monitoring, and tactical Dashboard. 🐳 Docker Ready.

audit cve dashboard devsecops docker nodejs npm pnpm python secops security self-hosted supply-chain-security vulnerability-scanner yarn

Last synced: 28 Apr 2026

https://github.com/abdulrahmans0414/securepass-generator

SecurePass Generator is a modern, user-friendly password generator built with React. Create strong, randomized passwords with customizable options like length, numbers, and special characters.

clipboard-copy cryptography frontend password-generator react securepasswords security tailwindcss user-friendly web-application

Last synced: 18 Apr 2026

https://github.com/norah1499/solidity-flow-navigator

Solidity Flow Navigator is a local-first navigation tool for Web3 security auditors working with Solidity codebases. It converts each external or public function into an interactive execution Flow: a syntax-highlighted, navigable graph showing the internal call tree, modifiers, inheritance paths, and unresolved branches.

auditing call-graph ethereum security slither smart-contracts solidity static-analysis visualization web3

Last synced: 14 Jun 2026

https://github.com/bookedsolidtech/reagent

Zero-trust agentic infrastructure — safety hooks, behavioral policies, kill switches, and graduated autonomy for AI-assisted development with Claude Code and Cursor. npx @bookedsolid/reagent init

agentic ai-agents ai-governance ai-safety anthropic automation booked-solid claude claude-code cli cursor developer-tools devops git-hooks husky mcp nodejs secret-scanning security zero-trust

Last synced: 16 Apr 2026

https://github.com/diomonogatari/mcp-guard

Roslyn analyzer that flags MCP tool-poisoning in your C# servers before it ships.

csharp dotnet mcp prompt-injection roslyn roslyn-analyzer security static-analysis

Last synced: 06 Jun 2026

https://github.com/shivammm21/apigateway

A lightweight API Gateway built with Spring Boot + Redis, offering authentication, rate limiting, IP blocking, routing, and real-time analytics.

api-gateway api-security cyber-security cybersecurity developer developer-tools docker-image dockerfile security testing

Last synced: 24 Apr 2026

https://github.com/tomurisk/keepassx-appimage

AppImage repack of the ol' KeePassX. This AppImage can pretty much run on a toaster, 1970s TV, dead raccoon, or maybe even a frisbee.

abandonware applications deployment keepass packaging password-manager privacy security

Last synced: 18 Apr 2026

https://github.com/finsavvyai/opensyber-mcp-watch

MCP rug-pull detection. SHA-256 fingerprints per tool, per server, across days.

ai-agents ai-security drift-detection mcp model-context-protocol opensyber prompt-injection security

Last synced: 14 Jun 2026

https://github.com/funnyhcat-dotcom/json-sample-redactor

Redact secrets and personal data from JSON before sharing examples.

cli developer-tools json nodejs pii privacy redaction secrets security

Last synced: 29 Jun 2026

https://github.com/jnthans/wazuh-cortex-xdr

Wazuh SIEM wodle that ingests alerts and incidents from Palo Alto's Cortex XDR via the Cortex XDR REST API.

cortex-xdr security siem wazuh xdr

Last synced: 04 Apr 2026

https://github.com/bendns/dont-track-me

Modular anti-tracking toolkit — audit how trackable you are online and apply countermeasures. DNS leaks, metadata, browser fingerprinting, cookies, social trackers, search/social noise injection.

anti-tracking browser-privacy cli cookies dns fingerprinting metadata noise-injection osint privacy python security social-media surveillance

Last synced: 04 Apr 2026

https://github.com/gregmolnar/rails-waf

A WAF for Rails applications built on top of Rack::Attack

rails security

Last synced: 24 Apr 2026

https://github.com/projectx667/redbreach-desktop

Advanced AI-powered orchestration platform for offensive security and penetration testing.

ai ai-agent ai-assistant bun cli electron infosec offensive-security penetration-testing pentesting red-teaming security security-audit solidjs tui

Last synced: 06 Jun 2026

https://github.com/deepaksorthiya/spring-boot-keycloak-authorization

Spring Boot Security Keycloak Policy ABAC Authorization

abac access-control policy security spring-boot spring-security

Last synced: 24 Apr 2026

https://github.com/systemslibrarian/secure-file-upload-dotnet

Production-grade 8-layer file upload security pipeline for ASP.NET Core 8, with an AI red-team adversarial security analysis.

aspnet-core csharp defense-in-depth dotnet file-upload- security

Last synced: 01 Jun 2026

https://github.com/ykus4/pypproxy

MITM HTTP/HTTPS proxy for inspecting and modifying traffic — GUI/CUI, rule engine, GraphQL support, security tools

graphql http-proxy https-proxy mitm nicegui penetration-testing proxy python security websocket

Last synced: 14 Jun 2026

https://github.com/ducaanhlehuu/attt

Bài tập ATTT

attt hust hust-lab ipynb python security

Last synced: 28 Feb 2026

https://github.com/integsec/portsnatcher

Catch ephemeral ports the moment they open — fingerprint, hold open, and hand off to the pentester before the window closes. Apache-2.0.

burp-suite ephemeral-ports fingerprinting mitm offensive-security pentesting port-scanner red-team rust security

Last synced: 24 Apr 2026

https://github.com/hasip-timurtas/solsec

🛡️ CLI toolkit for auditing Solana smart contracts. Includes static analysis, IDL-based fuzzing, plugin system, and multi-format reports.

anchor auditing blockchain cli fluzzing rust security smart-contracts solana static-analysis web3

Last synced: 24 Apr 2026

https://github.com/liamvinberg/pi-secrets

Pi extension: agent requests secrets via a masked prompt. Env var delivery, never in model context, redacted from output

coding-agent extension pi pi-coding-agent pi-package secrets security tui

Last synced: 15 Jun 2026

https://github.com/solomonneas/thehive-mcp

MCP server for TheHive incident response platform. Manage cases, alerts, tasks, observables, and investigations via AI agents.

ai-agents case-management incident-response mcp model-context-protocol security soar thehive

Last synced: 25 Apr 2026

https://github.com/solomonneas/zeek-mcp

MCP server for Zeek network analysis framework — intelligent log parsing, querying, and security analysis

ai-agents mcp model-context-protocol network-analysis security traffic-analysis zeek

Last synced: 30 Apr 2026

https://github.com/bujosa/sharepasswords

Backend/admin services for sharepasswords.com.

admin-panel dashboard gcp mongodb security

Last synced: 15 Jun 2026

https://github.com/icd360s-e-v/mail

Secure, end-to-end encrypted email client for desktop and mobile — Flutter, OpenPGP, mTLS, ClamAV, zero local storage

clamav cross-platform dart email-client end-to-end-encryption fluent-ui flutter imap mtls openpgp pgp-mime privacy security smtp zero-knowledge

Last synced: 16 May 2026

https://github.com/adambornrepo/microservices-security-starter

Microservices Starter with FeignClient, Reactive Gateway, and Spring Security (JWT-based)

config eureka feign-client gateway java jwt microservices security spring-boot spring-security

Last synced: 25 Apr 2026

https://github.com/everdrone/genpwd

Generates iOS style strong password suggested by Safari

cli generator go golang password password-generator secure security

Last synced: 09 Feb 2026

https://github.com/thongnguyens/ubuntu-setup-optimization

Tổng hợp lệnh cài đặt, cấu hình và tối ưu hóa Ubuntu — xóa lịch sử lệnh, gỡ Snapd, cài font, bộ gõ, Brave, Firefox, bảo mật, máy ảo, Flathub, Timeshift, Git, Java IDEs, GParted...

bamboo brave clamav firefox flatpak gnome-boxes ibus optimization security setup timeshift ubuntu virtualization

Last synced: 04 Jun 2026

https://github.com/th3shadowbroker/petya2-patch

A patch to protect your windows pc from Petya 2 LAN-Attacks.

2017 patch petya registry security security-breach security-tools smb windows

Last synced: 25 Apr 2026

https://github.com/zavora-ai/skill-security-vulnerability-management

Security vulnerability skill — CVE search, dependency audit, risk scoring, remediation plans

adk-rust agent-skills claude-skills cve enterprise mcp security vulnerabilities

Last synced: 15 Jun 2026

https://github.com/garylouisstewart/cks-2025

Different Excercises and scripts to help with the CKS certification, k8s version 1.31

containerisation cybersecurity docker kubernetes podman security

Last synced: 25 Apr 2026

https://github.com/karlkfi/claude-workspace-guard

Path-aware bash permissions for Claude Code.

bash claude-code claude-code-plugin guardrail hooks sandbox security

Last synced: 04 Jun 2026

https://github.com/fesabelilla/spring3-security-jwt

This repository represents the upgraded version of the spring security (Spring3), JWT, and CSRF

api csrf jwt security spring-boot spring-security

Last synced: 25 Apr 2026

https://github.com/tatilimongi/simple-authentication-system

A secure authentication system implementing bcrypt for password hashing, developed as a classroom exercise for the Secure Development course

authentication bcrypt encription hashing-algorithm java login-system password-hashing secure-coding security university-project

Last synced: 25 Apr 2026

https://github.com/paalamugan/freecodecamp-stockchecker-project

InfoSec project for freeCodeCamp

express nodejs security

Last synced: 04 Apr 2026

https://github.com/systemslibrarian/crypto-lab-stego-suite

Browser-based steganography suite — LSB substitution, DCT-domain hiding, and adaptive embedding with live chi-squared steganalysis. Hide the message, not just the content.

browser-crypto chi-squared-test covert-channel crypto-lab cryptography dct digital-watermarking image-processing lsb-steganography privacy security steganalysis steganography typescript vite

Last synced: 01 Jun 2026

https://github.com/john-wilmes/claude-agentic-coding-playbook

Evidence-based practices for LLM-assisted development. Install scripts, Claude Code configuration, and a research-backed best practices guide with 34 verified citations.

agentic-development ai-coding best-practices claude-code code-quality cursor developer-tools prompt-engineering security testing

Last synced: 20 Apr 2026

https://github.com/allsmog/kuzushi-security-plugin

Autonomous, language-aware security pipeline for Claude Code: builds repo context, then x-ray → PASTA threat model → CVE threat-intel → invariant testing & adversarial threat-hunting. Wires conditional LSP/MCP tooling (tree-sitter, semgrep, CodeQL, Joern); promotes findings to a shared index. Self-contained, no external engine.

claude-code claude-code-plugin codeql devsecops joern sast security semgrep static-analysis threat-intelligence threat-modeling tree-sitter

Last synced: 03 Jun 2026

https://github.com/jonnonz1/deadman-10

Durable dead-man's switch in a single Go binary — if you stop checking in, an age-encrypted vault is released to your beneficiary. drand timelock + Shamir shares let it fire with no server or operator; optional permanent delivery via Arweave.

age-encryption arweave cli dead-mans-switch digital-legacy drand encryption golang security shamir-secret-sharing timelock

Last synced: 15 Jun 2026

https://github.com/kangphp/totp-browser-authenticator-extension

A lightweight browser extension that generates TOTP codes for two-factor authentication, compatible with Google Authenticator

2fa authenticator browser-extension chrome-extension google-authenticator security totp two-factor-authentication

Last synced: 25 Apr 2026

https://github.com/raheesahmed/android-device-security-checker

A comprehensive tool for checking the health and security status of your Android device. This tool provides detailed information about your device's performance, installed applications, and potential security issues.

android malware-detection performance-monitoring- security security-audit security-scanner system-monitor system-monitor-python

Last synced: 25 Apr 2026

https://github.com/canonical/certificate-transfer-interface

Charm libraries for providers and requirers of the certificate-transfer integration.

juju mtls security tls trust-store x509

Last synced: 17 May 2026

https://github.com/credona/age-decision-antispoof

Image-based anti-spoofing service detecting presentation attacks using ONNX models and multi-signal heuristics.

anti-spoofing api biometrics computer-vision credona face-analysis face-detection fastapi liveness-detection machine-learning onnx open-source presentation-attack-detection privacy security

Last synced: 02 May 2026

https://github.com/cosmonovarnd/jwtguard

Guard JWT Authenticator for Symfony

guard jwt security symfony

Last synced: 17 Apr 2026

https://github.com/atkei/piccolo-sql-guard

Static analysis tool for detecting unsafe raw SQL construction in Piccolo ORM projects

piccolo pyton security sql-injection static-analysis

Last synced: 15 Jun 2026

https://github.com/gearlight-labs/privacywarden

PrivacyWarden — Mullvad VPN privacy manager for VTubers. Auto-toggles VPN modes, monitors DNS, detects threats, and protects your identity during live streams.

csharp dns dotnet mullvad privacy privacy-tools security streaming vpn vtuber windows windows-service

Last synced: 07 Jun 2026

https://github.com/teskilatsiz/mergelock

Rust tabanlı, yerel çalışan kod güvenliği tarayıcısı. Güvenlik açıklarını, gizli anahtarları ve riskli kod kalıplarını tespit eder.

local-first mergelock rust secrets-detection security security-tools vscode-extension

Last synced: 07 Jun 2026

https://github.com/dotnetextensions/oauth20.server.host

Hosted OAuth 2.0 Authorization Server for ASP.NET Core, featuring built-in OAuth 2.0 endpoints, Blazor-based Admin Panel and Personal Account UI, and support for various deployment options including Docker, Kubernetes, Helm, and Windows Service/IIS. Leverages core libraries from DotNetExtensions.OAuth20.

aspnetcore authentication authorization authorization-server blazor cross-platform docker dotnet dotnetcore dotnetframework helm iis kubernetes security windows-service

Last synced: 28 Feb 2026

https://github.com/antonlovesdnb/fishbowl

Containerized credential auditing perimeter for AI coding agents. Wraps Codex/Claude Code in Docker, audits every credential access via eBPF.

ai-agents claude-code codex container-security credential-security devtools docker ebpf rust security

Last synced: 26 Apr 2026

https://github.com/arpihomesecurity/arpi_server

ArPI home security system - backend component

home-security python raspberrypi security

Last synced: 26 Apr 2026

https://github.com/bhojpur/certificate

The Bhojpur Certificate is a platform-as-a-service product used as a Security Certificate Engine based on Bhojpur.NET Platform for application delivery.

certificate security ssl tls

Last synced: 08 Feb 2026

https://github.com/quine-build/quine-target-subleq

Quine compiler backend for SUBLEQ architecture

compiler python security subleq

Last synced: 28 Feb 2026

https://github.com/bnema/sekeve

CLI secret manager with GPG encryption and gRPC sync. Built with Go 1.26 runtime/secret memory protection.

cli encryption golang gpg grpc password-manager secret-manager security

Last synced: 04 Apr 2026

https://github.com/gabrielbbaldez/spring-taint

Interprocedural taint analysis for Spring Boot, built on Tai-e — detects multi-layer data-flow vulnerabilities that SonarQube can't reach.

java sarif sast security spring-boot static-analysis tai-e taint-analysis

Last synced: 16 Jun 2026

https://github.com/systemslibrarian/postquantum-jwt

PostQuantum.Jwt — Modern post-quantum hybrid JWT library for .NET 10 using X-Wing (X25519 + ML-KEM-768) and ML-DSA signatures.

cryptography csharp dotnet hybrid-cryptography jwt ml-dsa ml-kem post-quantum pqc security tokens x-wing

Last synced: 01 Jun 2026

https://github.com/jchambers/java-noise

A Java implementation of the Noise Protocol Framework

cryptography java noise noise-protocol noise-protocol-framework security

Last synced: 26 Apr 2026

https://github.com/datanoisetv/sandkasten

A sandbox for running software in a more secure way. Research project.

cage darwin devops ipc isolation macos sandbox sandboxing security

Last synced: 27 Apr 2026

https://github.com/sr-lab/pol-infer

Inferring password composition policies from breached user credential databases.

inference password-policy security

Last synced: 27 Apr 2026

https://github.com/citadel-cloud-management/terraform-aws-guardduty-ai

AI-enhanced GuardDuty module with threat intelligence, automated triage, and Security Hub integration

ai aws bedrock devops devsecops guardduty infrastructure-as-code production-ready security siem soc terraform terraform-module threat-detection

Last synced: 27 Apr 2026

https://github.com/uptudev/passwerdle

A game based on guessing one of the top 500 most used passwords.

cli cli-game game password security wordle wordle-clone

Last synced: 03 Mar 2026

https://github.com/ponomarenko/verdaccio-security-filter

Advanced security filter plugin for Verdaccio with version range blocking and fallback strategies

security verdaccio verdaccio-plugin vulnerability

Last synced: 27 Mar 2026

https://github.com/zametkikostik/polygon-immortal-auth-sdk

The first decentralized, gasless 2FA infrastructure on Polygon. One-time payment, lifetime security. Powered by Biconomy Account Abstraction & IPFS.

2fa account-abstraction biconomy gasless polygon security two-factor-authentication web3

Last synced: 04 Apr 2026

https://github.com/b3ta-blocker/netrecon

Automates network reconnaissance using nmap and performs a detailed scan on a given IP address. Supports Linux and macOS, with manual instructions for Windows.

automation linux network-scanning nmap python reconnaissance security

Last synced: 27 Apr 2026

https://github.com/zametkikostik/secure-telegram-client

🔐 Liberty Reach Messenger v2.0 — Приватный мессенджер с post-quantum шифрованием, P2P-сетью и 24/7 Cloudflare

ai android bots cloudflare decentralized defi encryption kyber messenger p2p post-quantum privacy react-native rust security self-hosted steganography tauri web3 webrtc

Last synced: 04 Apr 2026

https://github.com/stxkxs/aws-eks

Production-grade EKS infrastructure with AWS CDK v2, ArgoCD GitOps, and full security/observability stack

argocd aws cdk cilium eks gitops infrastructure-as-code karpenter kubernetes observability security typescript

Last synced: 04 Apr 2026

https://github.com/suuhm/xml_event_xtractor

export and analyze windows evtx events from xmlcli export files

analyzer blueteam eventlog events evtx forensics logging security siem windows xml xmlcli

Last synced: 27 Apr 2026

https://github.com/joris-gallot/grantify

Lightweight framework-agnostic RBAC and permission management toolkit

access-control acl auth authorization permissions rbac roles security

Last synced: 15 Feb 2026

https://github.com/punitmishra/vaultic

🔐 Local-first, hardware-secured password manager with FIDO2/YubiKey support, AI-powered analysis, and beautiful CLI/TUI

cli encryption fido2 password-manager rust security

Last synced: 08 Feb 2026

https://github.com/turbot/steampipe-mod-bitbucket-compliance

Run individual controls or full compliance benchmarks for across all of your Bitbucket resources using Steampipe.

bitbucket cis cis-benchmark compliance hacktoberfest security sql steampipe steampipe-mod

Last synced: 19 Mar 2026

https://github.com/quine-build/quine-target-wasm32

Quine compiler backend for Web Assembly

compiler python security web-assembly

Last synced: 27 Feb 2026

https://github.com/santiellena/cryptopals

My solutions to Cryptopals challenges (http://cryptopals.com/) written in Rust

cryptography rust-lang security

Last synced: 07 Jun 2026