An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/gusta-ve/wraith

Pipeline-based offensive security scanner: recon, web vuln testing (XSS/SQLi/IDOR/BAC) and post-exploitation. Python, no core deps.

broken-access-control idor offensive-security pentest post-exploitation python recon red-team security security-tools

Last synced: 16 Jun 2026

https://github.com/neuralegion/stop-scan

Action stops a NeuraLegion scan

github-actions scan security

Last synced: 29 Apr 2026

https://github.com/cruxstack/aws-securityhubv2-bot

Process AWS Security Hub v2 (OCSF) findings with auto-suppression rules, filtering, and optional Slack alerts

automation aws aws-lambda aws-security compliance golang guardduty inspector macie ocsf security security-hub securityhub slack

Last synced: 29 Apr 2026

https://github.com/nanhtuan30/keycloak_frontend

Fullstack project with Angular (17.3.17) frontend and Spring Boot (3.5.5) backend integrated with Keycloak (26.3.1) for authentication and authorization.

angular authentication authorization jwt keycloak security spring-boot sso

Last synced: 29 Apr 2026

https://github.com/xarf/xarf-spec

XARF v4 Specification - Schemas, documentation, and samples for the eXtended Abuse Reporting Format

abuse-reporting documentation json-schema samples security specification v4 xarf

Last synced: 01 Apr 2026

https://github.com/bettis007/btc-magic-guard

Uses iptables to block and expose thousands of malicious peers targeting the btc and bch networks right now - June 2025

bitcoin bitcoin-cash bitcoin-cash-wallet bitcoin-wallet python python3 scapy security security-tools

Last synced: 29 Apr 2026

https://github.com/paihari/syntropai-mcp-ecosystem

Unified multi-cloud abstraction framework providing secure, dynamic access to AWS, Azure, and OCI through Model Context Protocol servers with AST-based sandboxin

aws azure docker fintech mcp-server mult-cloud oracle-cloud python security

Last synced: 29 Apr 2026

https://github.com/arcjet/example-nextjs-server-action

An example Next.js form + server action protected by Arcjet bot detection, rate limiting, and Shield WAF.

arcjet bot-detection developer-tools javascript nextjs nodejs rate-limiting react-forms security security-tools typescript

Last synced: 29 Apr 2026

https://github.com/yashwanth2408/neurocode

🛡️ AI-powered security scanner for automated PR reviews using CodeLlama, Semgrep & Bandit

ai api bandit code-analysis codellama devsecops docker fastapi llm ollama python security security-scanner semgrep webhook

Last synced: 29 Apr 2026

https://github.com/Perufitlife/ollama-security

Active-probe security auditor for Ollama: detects a publicly bound, unauthenticated API and PROVES model/compute leaks live via anonymous /api/tags, /api/ps, /api/generate and CORS probes. Zero deps, MIT.

ai-agents cors devsecops llm llm-security local-ai local-llm ollama security security-audit

Last synced: 25 Jun 2026

https://github.com/lfreleng-actions/sonatype-lifecycle-scan-action

Performs a Sonatype Lifecycle security scan/audit of a repository

security security-scan sonatype

Last synced: 16 Feb 2026

https://github.com/ironystock/civic-auth-go

A comprehensive (unofficial) Go SDK for integrating with Civic Auth's OIDC/OAuth2 authentication service

auth authentication authn authn-client civic go oauth2 oidc sdk-go security

Last synced: 11 Oct 2025

https://github.com/sulthonzh/agent-dep-shield

Guard AI agent dependency installations with intelligent security checks

ai ai-agent code-security dependency guard mcp npm pip security slopsquat supply-chain typosquat

Last synced: 25 Jun 2026

https://github.com/saagpatel/agent-harness-hardening

Adversarial hardening of an AI coding-agent harness — guard hooks, drift-safe installers, and a bypass-class taxonomy. Paths and identifiers anonymized.

agents ai-safety claude-code developer-tools hardening hooks security

Last synced: 28 Jun 2026

https://github.com/3133computing/noonlight-hass

Noonlight integration for home assistant

alarm homeassistant homeassistant-integration security

Last synced: 29 Apr 2026

https://github.com/dylanlt/eth-realtime-security

Realtime security checking of contracts associated with transactions in flight on the network

ethereum security

Last synced: 30 Apr 2026

https://github.com/joycemwangi/terraform-iac-hybrid-deployments

Terraform IaC framework for hybrid cloud and multi-vendor network automation. Supports AWS, Azure, GCP, OCI, Cisco ACI/IOS/SD-Access, Palo Alto & Panorama, Fortinet, Juniper, F5, Infoblox, Zscaler and Check Point. Delivers standardized provisioning, policy enforcement and secure deployments across cloud and on-prem environments.

automation automation-framework cisco cloud cloud-engineering devops f5 fortinet hybrid-cloud iac infrastructure-as-code multicloud multivendor network-automation paloalto security software-defined-networking terraform terraform-modules zero-trust

Last synced: 08 Jun 2026

https://github.com/daveaditya/information-security

Implementation of various algorithms used in Information Security. Might contain some unattended bugs.

algorithms command-line-app python-3-5 security

Last synced: 13 Mar 2026

https://github.com/smouj/agentdnai

🔐 AgentDNAI — Verifiable Digital Identity for AI Agents. Scoped permissions, temporary tokens, hash-chained audit trails, and zero-trust authorization.

ai-agents audit-trail authorization identity mit-license nextjs open-source permissions prisma security typescript zero-trust

Last synced: 12 Jun 2026

https://github.com/burumdev/esp32-padlock

Securely lock and unlock your ESP32-cX device over an encrypted web endpoint.

embedded esp32 esp32-c3 esp32-c6 https rust security tls

Last synced: 18 May 2026

https://github.com/radishconcepts/radish-wp-2fa

Enforceable, frontend-first two-factor authentication for WordPress with role-based hard enforcement.

2fa multisite security totp two-factor-authentication wordpress wordpress-plugin

Last synced: 01 May 2026

https://github.com/houzuoguo/yast2-hana-firewall

a YaST program for configuring HANA-Firewall and controlling its state

linux os sap sap-hana security sles suse yast

Last synced: 01 May 2026

https://github.com/vchkhr/otp-2fa-rails

This is a demo application with One-time password Two-factor authentication in Ruby on Rails with Devise gem.

2fa rails ruby security

Last synced: 01 May 2026

https://github.com/joshjarabek7/hiss

Secure your FastAPI applications effortlessly with Hiss! 🐍🔒 Hiss offers a collection of decorators and custom middleware for seamless integration of advanced security features, including virus scanning with ClamAV, input sanitization, and robust authentication/authorization. Build powerful and secure APIs with ease. 🛡️✨

api async authentication authorization clamav decorators fastapi input-validation open-source pydantic python security virus-scanning web-framework

Last synced: 01 May 2026

https://github.com/zrquan/gatherer

Gatherer 是一个简易的爬虫工具

crawler infosec pentest security

Last synced: 14 Jan 2026

https://github.com/r3k1ng/hackage-security

Hackage security framework based on TUF (The Update Framework)

ddos hack hacking python security server sniffer

Last synced: 01 May 2026

https://github.com/soos-io/soos-integration-java-core

Scan your open source software for vulnerabilities, control the introduction of new dependencies, exclude unwanted license-types, generate SBOMs, and fill out your compliance worksheets with confidence

analysis-package build ci java open-source package-manager security

Last synced: 19 Jan 2026

https://github.com/ssexton16/websecuritycheatsheet

🔒 Secure your web applications with essential security practices and guides for SSL, server configuration, authentication, and data protection.

apache apache-configuration content-security-policy javascript-security nginx security security-cheatsheets sql-injection web-security websecurity xss-vulnerability

Last synced: 06 Oct 2025

https://github.com/bethanyuo/solidity-security

Exercises pertaining to various Smart Contract vulnerabilities.

attacks honeypot security short-address smart-contracts vulnerabilities

Last synced: 19 Mar 2026

https://github.com/ryan-rozario/bandit_otw

Solution of Bandit War game of OverTheWire https://overthewire.org/wargames/bandit/

bandit-war-games overthewire security

Last synced: 05 Oct 2025

https://github.com/wfykitty/blockchain-security-practices

labs for Blockchain Security Practices

etherjs security smart-contracts solidity

Last synced: 02 May 2026

https://github.com/buzzqw/log2iptables

Automatic IP blocking from log files — bruteforce, port scans, web attacks

blocklist bruteforce-attacks iptables linux log2iptables security ssh

Last synced: 08 Jun 2026

https://github.com/tonyfenwick8814121/100-percent-skill-vetter

OpenClaw 技能/插件安装前审查插件:生成本地报告并阻断 critical 风险

ai-agent openclaw plugin security skill-vetter

Last synced: 16 Jun 2026

https://github.com/unsecured-company/gitrip

Tool to download exposed GIT repository, written in Golang.

bugbounty git offensive-security penetration-testing pentesting security

Last synced: 02 May 2026

https://github.com/maxjdev/forumhub-oraclenexteducation-challenge

Projeto do modulo: Java e Spring Framework G7 - ONE

docker forum java jwt mysql security spring-boot

Last synced: 13 Apr 2026

https://github.com/rstierli/fortianalyzer-api-postman

Postman collection for FortiAnalyzer JSON-RPC API - 100+ endpoints for log management, reporting, device management, and security operations

api api-client fortianalyzer fortianalyzer-api fortinet json-rpc log-management newman postman postman-collection reporting security

Last synced: 17 Jun 2026

https://github.com/kogunlowo123/terraform-gcp-iam

Terraform module for Google Cloud IAM with custom roles, service accounts, workload identity federation, and org policies

gcp google-cloud iam security terraform terraform-module workload-identity

Last synced: 02 May 2026

https://github.com/ilxnah/devops-case-study

Dev(Sec)Ops Case Study: Insights on Kubernetes, GitOps, monitoring, security & networking. | Případová studie pro Dev(Sec)Ops: Poznatky o Kubernetes, GitOps, monitoringu, bezpečnosti a síťování.

automation case-study ci-cd container-orchestration devops docker gitops grafana infrastructure-as-code interview-prep kubernetes kubernetes-cluster load-balancing log-aggregation monitoring networking prometheus rbac security ssl-tls

Last synced: 17 Apr 2026

https://github.com/justinjilg/brainstorm-security-stack

The Living Case Study — AI agents building Wiz + CrowdStrike + SentinelOne from scratch, live, 24/7. Powered by Brainstorm CLI + BrainstormRouter.

agents ai brainstorm cnapp edr live-coding open-source security siem

Last synced: 02 May 2026

https://github.com/subhranil002/user-authentication-ssr

User-Authentication-SSR provides a secure authentication system with server-side rendering (SSR) for web apps. It ensures seamless login experiences and enhanced performance ... ❤️

authentication bcrypt cookies environment-variables expressjs handelbars jsonwebtoken jwt middlware mongodb nodejs password-hashing security server-side-rendering sessions ssr user-management

Last synced: 02 May 2026

https://github.com/pivaldi/emacs-passfile

Very simple Emacs package allowing to view and edit securely a GnuPG encrypted file

emacs password-store passwords security

Last synced: 05 Oct 2025

https://github.com/nnxmms/llm-security

A Security Testing Suite for Large Language Models

ai benchmarking exploits llms python security

Last synced: 02 Apr 2025

https://github.com/quine-build/quine-target-wasm32

Quine compiler backend for Web Assembly

compiler python security web-assembly

Last synced: 27 Feb 2026

https://github.com/masato-ro/kitana_cryptool

A versatile, cross-platform cryptographic utility built with C++, FLTK, and OpenSSL. Features include AES encryption, RSA key generation, password generation, and hash matrix verification.

aes-encryption cpp cross-platform cryptography fltk hashing openssl password-generator rsa-keys security

Last synced: 14 Jun 2026

https://github.com/harmotus/secure-login-one

A secure login where the user's private key is never hosted on servers or the user's online devices ( this project can also be used as a form of two-factor authentication ( 2FA ) where the user's private key is never hosted on servers )

2fa authentication html5 javascript login mysql mysql-database password-protection php php-authentication php-login php-mysqli php-pdo qr-code responsive-web-design rsa rsa-encryption rsa-key-pair security two-factor-authentication

Last synced: 10 Feb 2026

https://github.com/marcelofabianov/doberman

Go PKG para gerenciamento de senhas, oferecendo geração e validação configuráveis e hashing moderno com Argon2id.

argo2 package password security type-safe validation

Last synced: 14 Jan 2026

https://github.com/rishabhv471/shield-storage

shield-storage is a lightweight JavaScript library that helps secure browser storage.

development localstorage npm npm-package secure-storage security sessionstorage

Last synced: 03 May 2026

https://github.com/7a6163/gem-audit

Ultra-fast, standalone security auditor for Gemfile.lock — written in Rust

audit bundler cli cve gemfile ruby ruby-on-rails rust security security-tools vulnerability-scanner

Last synced: 01 Apr 2026

https://github.com/jenkinsci/secone-security-plugin

Scan your projects for vulnerabilities with Jenkins. This plugin is officially maintained by Sec1.

devsecops security

Last synced: 09 Feb 2026

https://github.com/gebalamariusz/cloud-audit

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

audit aws cli cloud-security compliance devops python security

Last synced: 05 Mar 2026

https://github.com/teodoroleckie/url-signer

⚡ Create secured URLs with a limited lifetime in php

php-8 safe-uri safe-url safety security uri-check url-signer

Last synced: 27 Mar 2026

https://github.com/pm-global/monarch-kit

PowerShell module for Active Directory auditing — structured discovery, graded findings, HTML reports

active-directory ad-security audit pester powershell security sysadmin winows

Last synced: 16 Apr 2026

https://github.com/amdevit/hoddmir

Hoddmir is a library that implements cryptographic helpers using managed .NET APIs and well-known cryptographic libraries to provide classes with useful tools for third-party applications, such as easy-to-use secure storage or in-memory password vaults.

aead cryptography dotnet secure-storage security store

Last synced: 12 Apr 2026

https://github.com/deuxksy/sylph

Sylph는 Tailscale ACL 과 Cloudflare(DNS)를 관리하는 시스템입니다.

acl automation devops diagram documentation github-actions network security tailscale vpn

Last synced: 03 May 2026

https://github.com/zandero/rest.context

Security and request context for RestEasy / Guice REST API

api guice rest resteasy security

Last synced: 02 Apr 2026

https://github.com/mahsumaktas/envguard

Scan source code and GitHub Actions for missing or orphaned environment variables and secrets

cli devsecops env-variables github-actions linter python secrets-management security static-analysis

Last synced: 28 Feb 2026

https://github.com/ferderer/security-lab

Hardening playbooks, security configurations, and reference implementations for WSL2, Linux, and application security.

ai-agents ansible devops hardening linux nftables security spring-security squid wsl2

Last synced: 03 May 2026

https://github.com/ritartistry/hal

HAL is a secure HTTP API Layer for Large Language Models, enabling seamless web API interactions and automatic tool generation from OpenAPI specs. 🚀🌐

analyze compiler cryptocurrency cryptography dsl embedded face-animation fpga go gpu halo image-animation integrated-circuits javascript network objective-c security source-code

Last synced: 03 May 2026

https://github.com/mehrshadmohammadi/github-search-automatically

This is a program written in Go language that we can use to quickly search inside GitHub. This program helps security researchers

api github-search information-security recan security security-tools

Last synced: 14 Jan 2026

https://github.com/bogdanticu88/mcp-map

Static attack surface analyzer for MCP servers and LLM tool definitions

cli devsecops llm mcp mitre-atlas model-context-protocol owasp python security static-analysis

Last synced: 03 Jun 2026

https://github.com/akacase/dns-compliance-testing

flake for dns-compliance-testing

dns nix security

Last synced: 11 Jun 2026

https://github.com/suahnkim/iaslab.org2_test

iaslab is a leading government funded research group studying image security impact, evaluation of SNS in terms of how it manages users' images, image compression, and image enhancement.

image lab privacy research-lab security security-impact sns

Last synced: 09 Feb 2026

https://github.com/systemslibrarian/secure-file-upload-dotnet

Production-grade 8-layer file upload security pipeline for ASP.NET Core 8, with an AI red-team adversarial security analysis.

aspnet-core csharp defense-in-depth dotnet file-upload- security

Last synced: 01 Jun 2026

https://github.com/ababic/dumpling

Fast, flexibile, powerful static data anonymisation for SQL dumps

anonymisation cli data-analysis data-science pii pii-redaction postgres privacy rust rust-lang scrubber scrubbing security tooling

Last synced: 03 May 2026

https://github.com/bitsensor/php

BitSensor Web Application Security

bitsensor php security

Last synced: 09 Jun 2026

https://github.com/batu3384/ironsentinel

Local-first AppSec CLI for guided scans, runtime trust checks, and evidence-rich reporting.

appsec bubbletea cli go sarif security

Last synced: 18 Jun 2026

https://github.com/systemslibrarian/postquantum-jwt

PostQuantum.Jwt — Modern post-quantum hybrid JWT library for .NET 10 using X-Wing (X25519 + ML-KEM-768) and ML-DSA signatures.

cryptography csharp dotnet hybrid-cryptography jwt ml-dsa ml-kem post-quantum pqc security tokens x-wing

Last synced: 01 Jun 2026

https://github.com/borisdz/document-validation-server

A server for validating documents by their certificate

certificate document-validator documentation-tool security validation-tool

Last synced: 18 Jun 2026

https://github.com/mikeshobes718/iam-guardrails

IAM role/policy validation and drift detection with safe update previews; policy-as-code guardrails.

aws compliance governance iam policy-as-code security

Last synced: 17 Mar 2026

https://github.com/uysct/pyload-ft-public-full

Fast and secure Python download manager - hardened pyLoad-ft derivative

docker download-manager hardening pyload pyload-ft python security

Last synced: 02 Apr 2026

https://github.com/soyvural/kubectl-ro

Read-only Kubernetes access for AI agents and humans. kubectl wrapper + MCP server that blocks mutations and redacts secrets.

ai-agents cloud-native devops krew kubectl kubectl-plugin kubernetes llm mcp mcp-server read-only security

Last synced: 02 Apr 2026

https://github.com/jul10l1r4/bypaxpan

Ferramenta para bypassar análises de processamento de linguagem natural :knife:

bypass nlp security

Last synced: 18 Jan 2026

https://github.com/juliosuas/vulcan

🌋 AI-Powered Autonomous Penetration Testing Agent — ReAct loop with Claude/GPT-4, full pipeline from recon to report

ai automation cybersecurity ethical-hacking penetration-testing pentesting python security

Last synced: 03 May 2026

https://github.com/harmim/vut-bis-project

Bezpečnost informačních systémů - Projekt - The FITfather

bis hacking security software-security sql-injection ssh vut vut-fit

Last synced: 13 Feb 2026

https://github.com/lennolium/1guard-safari

Semester's Project - System and Software Engineering 1 - safari plugin

ai macos safari safari-extension security shopping

Last synced: 25 Apr 2026

https://github.com/nikicat/gopass-secret-service

D-Bus Secret Service provider using GoPass as backend - store secrets from any app in your GPG-encrypted password store

dbus freedesktop gnome-keyring golang gopass gpg linux password-manager secret-service security

Last synced: 01 Feb 2026

https://github.com/moltblock/moltblock

Framework for evolving composite AI entities. Multi-agent graphs, verification, memory, and governance — molting, not chaining. OpenClaw-ready.

ai ai-agents ai-safety composite-intelligence governance llm multi-agent nodejs openclaw security trust typescript verification

Last synced: 01 Apr 2026

https://github.com/vettid/vettid-ios

VettID iOS App - Swift/SwiftUI

identity ios privacy security swift swiftui

Last synced: 23 Feb 2026

https://github.com/mcroteau/parakeet

A Small J2ee Security Framework / Plugin.

parakeet security servlet spring

Last synced: 01 Feb 2026

https://github.com/axonops/audit

Structured, compile time schema-enforced audit logging for Go services. Taxonomy-driven validation, type-safe code generation, multi-output fan-out (file, syslog, webhook and more), CEF + JSON formatters, HMAC integrity checks, per-output event routing, sensitivity labels, and async delivery.

audit audit-logging cef code-generation compliance go golang hmac security siem syslog type-safety webhook

Last synced: 17 Apr 2026

https://github.com/coldbootsec/secure-iam-lint

Scan your IAM policies before they hit prod. secure-iam-lint catches common misconfigurations with a simple CLI or CI step

aws ci-cd cloud compliance devsecops iam linter python security static-analysis

Last synced: 04 May 2026

https://github.com/instacode/lockdown

A github action that restricts build execution to specific users

actions continuous-integration security

Last synced: 17 Apr 2026

https://github.com/openzeg/lolvault

.lol Vault v2 is a secure, offline client-side encryption tool built as a single HTML file. It uses AES-256-GCM with PBKDF2 (250k iterations) and optional keyfile 2FA. Encrypt images, videos, and files locally — no server, no tracking. Strong, simple, and fully auditable.

encryption-decryption offline security

Last synced: 02 Apr 2026

https://github.com/turbot/flowpipe-mod-trello

Trello pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Trello to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pipelines security trello trello-api workflow workflow-automation workflow-engine

Last synced: 25 Feb 2026

https://github.com/projects-developer/phishing-website-detection-by-machine-learning-techniques

Phishing Website Detection by Machine Learning Techniques Project Includes Source Code, PPT, Synopsis, Report, Documents, Base Research Paper & Video tutorials

bca-projects btech-projects computer-science-projects computerscienceprojects cybersecurity final-year-projects finalyearprojects machine-learning mca-projects mtech-projects security url-phishing

Last synced: 01 Feb 2026

https://github.com/araan-sheikh/tumull-shield

Drop-in API rate limiting & DDoS protection for Node.js/Next.js

ddos express fastify hono middleware nextjs nodejs rate-limiting security typescript

Last synced: 03 Apr 2026

https://github.com/ridematch1/a.e.g.i.s

AEGIS — Automated Enterprise-Grade Inspection Suite. The paranoid audit tool your vibe-coded app deserves.

audit cli compliance dast gdpr mcp nextjs owasp sast scanner security supabase typescript

Last synced: 21 Apr 2026