Security
Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
- GitHub: https://github.com/topics/security
- Wikipedia: https://en.wikipedia.org/wiki/Computer_security
- Aliases: security-tools, security-vulnerability, security-audit,
- Last updated: 2026-07-14 00:27:46 UTC
- JSON Representation
https://github.com/hjosugi/learning-security-labs
Ethical hacking and defensive security learning repo using local OWASP-style labs
devsecops ethical-hacking learning owasp security web-security
Last synced: 20 Jul 2026
https://github.com/hjosugi/learning-platform-engineering
Platform engineering learning repo for CI/CD, security, observability, WebTransport, and operations
devops github-actions learning opentelemetry security webtransport
Last synced: 20 Jul 2026
https://github.com/gilbertrios/azure-appservice-logging-middleware
Terraform infrastructure and C# middleware for obfuscating sensitive data in Azure App Insights logs
app-insights appservice azure csharp data-masking dotnet logging middleware security terraform
Last synced: 16 Apr 2026
https://github.com/harmim/vut-bis-project
Bezpečnost informačních systémů - Projekt - The FITfather
bis hacking security software-security sql-injection ssh vut vut-fit
Last synced: 13 Feb 2026
https://github.com/mahsumaktas/envguard
Scan source code and GitHub Actions for missing or orphaned environment variables and secrets
cli devsecops env-variables github-actions linter python secrets-management security static-analysis
Last synced: 28 Feb 2026
https://github.com/blakley/home-security
A website that outlines the best home security practices
home-security security website-development
Last synced: 14 Feb 2026
https://github.com/esr-style/surakshamitra
This project implements a real-time behavioral and cognitive authentication system for mobile apps, focused on user verification through subtle patterns like typing cadence, swipe behavior, and hesitation flow. It can authenticate users accurately with as few as 7 samples.
Last synced: 16 Jul 2026
https://github.com/mgillam/golden.js
Quite probably the worst anti-xss library on the planet.
Last synced: 14 Jun 2025
https://github.com/sovereigncloudstack/security-k8s-scan-pipeline
Security scanning focused on the Kubernetes container layer
Last synced: 19 Mar 2026
https://github.com/ironystock/civic-auth-go
A comprehensive (unofficial) Go SDK for integrating with Civic Auth's OIDC/OAuth2 authentication service
auth authentication authn authn-client civic go oauth2 oidc sdk-go security
Last synced: 20 Jul 2026
https://github.com/andreyrusyaev/secreports
Security research reports
asp-net cve cve-2005-0452 owasp security vulnerability xss
Last synced: 28 Feb 2026
https://github.com/arisrhiannon/wormguard
Offline, zero-dependency npm supply-chain auditor — behavioral + baseline-diff detection of malicious install scripts (Shai-Hulud-style worms). No network, no account, no CVE database.
audit cli devsecops install-script lockfile malware npm offline security shai-hulud supply-chain typescript typosquat zero-dependency
Last synced: 31 May 2026
https://github.com/gpuslave/cyphering
Some security code implementation using Rust
Last synced: 20 Jul 2026
https://github.com/l1asis/vault-tar
AES-256-GCM file and directory encryption CLI with chunked streaming, configurable compression, and output splitting.
aes-256-gcm archiving cli compression cryptography directory-encryption encryption file-encryption pbkdf2 privacy python security
Last synced: 14 Feb 2026
https://github.com/davealdon/anti-csrf-csp
🔑🔒 A method for mitigating anti CSRF attacks on CSP derived api calls
api csrf csrf-prevention intersystems intersystems-cache intersystems-iris objectscript security
Last synced: 14 Feb 2026
https://github.com/anulum/rigor-foundry
Evidence-bound repository auditing and remediation planning.
code-audit code-quality devsecops evidence governance python remediation security software-architecture supply-chain
Last synced: 20 Jul 2026
https://github.com/joris-gallot/grantify
Lightweight framework-agnostic RBAC and permission management toolkit
access-control acl auth authorization permissions rbac roles security
Last synced: 15 Feb 2026
https://github.com/mehmettopcu/oslo.policy.remote
Remote Policy Checker for Oslo Policy - A Python package that enables remote HTTP-based policy checking, allowing policy decisions to be made by a remote service. Works with goslo.policy.server for centralized policy enforcement in OpenStack services.
authorization microservices openstack oslo policy rbac rest-api security yaml-configuration
Last synced: 15 Feb 2026
https://github.com/remimikalsen/sharepass
CredShare.app is a simple and secure sharing service for passwords or other secrets.
credentials password-safety security sharing
Last synced: 15 Feb 2026
https://github.com/ralianeng/idor-otaku
mitmproxy-based IDOR detection tool that tracks parameter flows to find insecure direct object references
cli idor mitmproxy pentesting python security security-tools vulnerability-detection
Last synced: 23 Feb 2026
https://github.com/bartoszgorka/bartoszgorka.github.io
My personal blog
blog ddd elixir jekyll jekyll-website security
Last synced: 16 Feb 2026
https://github.com/siterelenby/keyquorum
Shamir secret sharing daemon for distributed teams. Memory hardened, designed to prevent intercepting or handling another user's key or the secret itself, without jank or vulnerability points like shared tmux sessions.
cli cryptography cryptography-tools distributed-teams key-management linux rust secret-sharing security shamir shamir-secret-sharing
Last synced: 12 Jun 2026
https://github.com/mridang/traefik-superheader
A traefik plugin to add the most common headers to HTTP requests
headers http-headers middleware owasp security traefik traefik-middleware traefik-plugin
Last synced: 16 Jul 2026
https://github.com/jzo001/forge.security.jwt.shared
Jwt Token based authentication/authorization shared library
authentication authorization blazor jwt security sso
Last synced: 16 Feb 2026
https://github.com/almayor/rainfall
Learning about reverse engineering and buffer overflow attacks
buffer-overflow-attack reverse-engineering school-21 security
Last synced: 19 Mar 2026
https://github.com/biostochastics/clawbio-pgx-benchmark
Reproducible safety benchmark for pharmacogenomics AI tools provided by ClawBio
agents audit bioinformatics pharmacogenomics safety security
Last synced: 31 May 2026
https://github.com/baloise/ws-itsec_owasp
IT Security Guidelines - based on OWASP Top 10
owasp-top-10 presentation-slides security
Last synced: 01 Mar 2026
https://github.com/valkyrianlabs/forti2ban
Automated integration for updating FortiGate Threat Feeds with Fail2Ban IP logs, enhancing network edge security.
firewall fortigate network-protection network-security networking security server-security
Last synced: 01 Mar 2026
https://github.com/mggcode/projeto-ransomware-dio
Implementando um Ransomware para criptografar arquivos utilizando a linguagem Python.
cibersecurity dio-bootcamp kali-linux python santander-bootcamp security seguranca-da-informacao
Last synced: 20 Mar 2026
https://github.com/kevindellapiazza/aws-fargate-fintech-demo
Production-ready ECS Fargate infrastructure using Terraform and FastAPI
aws cloud cloud-architecture devops docker ecs ecs-fargate fargate fastapi finops iac infrastructure-as-code microservice python security terraform
Last synced: 16 Apr 2026
https://github.com/krikera/secure-npm
Security scanner for Node.js projects with AI-powered vulnerability detection and package recommendations
ai-powered cli dependency-checker nodejs npm package-security security vulnerability-scanners
Last synced: 02 Mar 2026
https://github.com/valkyoth/cloud-sdk
Multi-provider cloud SDK for Rust with a security-gated release process.
api-client cloud cloud-sdk devops dns hacktoberfest hetzner infrastructure rust sdk security supply-chain
Last synced: 21 Jul 2026
https://github.com/vellaveto/vellaveto
Agentic security control plane for MCP and AI agent tool calls. Policy gateway, topology discovery, identity-aware ABAC, and tamper-evident audit.
ai-agents audit compliance mcp owasp policy-engine rust security
Last synced: 16 Mar 2026
https://github.com/drakmord2/py-steg
Steganography tool that adds data to PNG images.
python3 security steganography
Last synced: 29 Jun 2026
https://github.com/davesteele/pwndck
Check a password against the HaveIBeenPwned password leak database
breach-check haveibeenpwned passwords python python3 security
Last synced: 16 Jul 2026
https://github.com/nisanth2004/oauth2-crud-react-app
OAuth2 React Crud app was developed using springboot with GitHub
application authentication authorization backend backend-api frontend java oauth2 security springboot
Last synced: 14 May 2026
https://github.com/demon1a/wizsub.sh
Bash script that automates the process of using subwiz to enumerate as much subdomains as it can
automation bash bugbounty bugbountytools recon security
Last synced: 02 Apr 2025
https://github.com/fakeerrorx/rexscan
RexScan is a high-speed Internet port scanner written in Rust, It can scan the entire Internet in under 6 minutes, transmitting 10 million packets per second.
hacking masscan networking nmap pentesting port rexscan rust rustscan scanning security security-tools
Last synced: 10 Apr 2025
https://github.com/ncryptf/ncryptf-swift
ncryptf for Swift 4+ - Secure API authentication and end to end encryption
api authentication end-to-end-encryption hkdf hmac libsodium ncryptf security sodium swift
Last synced: 16 Jul 2026
https://github.com/miiraak/scripts
A collection of scripts, all in one place PowerShell, Bash, C#, and more. Sorted PoCs, scripts and tools to help you tackle offense, defense, and analysis.
analysis automation cybersecurity defensive-security education library offensive-security pentesting poc powershell python scripts security shell toolkit utilities virus
Last synced: 16 Apr 2026
https://github.com/howprogrammingworks/csrf
Cross-Site Request Forgery (CSRF)
csrf owasp security vulnerability
Last synced: 03 Mar 2026
https://github.com/cesarsicas/spring-blog
REST API made with Spring Boot and Java.
api-server java rest security spring spring-boot
Last synced: 13 Apr 2026
https://github.com/arvid-berndtsson/redstr-server
HTTP API server for redstr string transformations
api http-server red-team redstr security
Last synced: 03 Mar 2026
https://github.com/ponomarenko/verdaccio-security-filter
Advanced security filter plugin for Verdaccio with version range blocking and fallback strategies
security verdaccio verdaccio-plugin vulnerability
Last synced: 27 Mar 2026
https://github.com/project-navi/navi-bootstrap
A repo that bootstraps repos. Spec-driven Jinja2 engine + 7 template packs for production-grade CI, security, and release pipelines.
bootstrapping ci-cd code-review devops jinja2 python security template-engine
Last synced: 03 Mar 2026
https://github.com/uptudev/passwerdle
A game based on guessing one of the top 500 most used passwords.
cli cli-game game password security wordle wordle-clone
Last synced: 03 Mar 2026
https://github.com/luciangutu/tls_handshake_poc
Poor's man PoC for TLS handshake
Last synced: 14 May 2026
https://github.com/reaatech/tool-use-firewall
Policy enforcement proxy between agents and MCP tools. Cost caps, rate limits, argument validation, human-in-the-loop approval for destructive ops, read-only mode, and full audit logging. MCP-native.
agentic-ai ai ai-agents developer-tools llm mcp mcp-gateway mcp-server model-context-protocol security typescript
Last synced: 16 Jul 2026
https://github.com/goafabric/callee-service-quarkus
⚛️Very tiny QUARKUS Service without Persistence - Also includes a native image build
aspect native oidc openapi prometheus quarkus rest-api security
Last synced: 04 Mar 2026
https://github.com/reaatech/mcp-gateway
Production MCP gateway — OAuth/OIDC + API key auth, per-tenant rate limiting, schema enforcement, tool allowlists, request/response logging, audit trail, fan-out to multiple upstream MCP servers, response caching. The Kong/Envoy for MCP.
agentic-ai api-gateway audit-log auth caching fan-out mcp mcp-gateway mcp-server multi-tenant oauth oidc proxy rate-limiting reverse-proxy schema-validation security typescript
Last synced: 16 Jul 2026
https://github.com/csaba79-coder/web-spring-captcha
Web App with CAPTCHA
h2-database jpa-hibernate junit5 lombok security thymeleaf webapp
Last synced: 26 Mar 2025
https://github.com/jaegeral/goldfish
So simple that you might wonder why it took so long
Last synced: 04 Mar 2026
https://github.com/Ami-Solution/wot-security
a repo exclusively for security to better manage issues and security considerations for WoT
iot privacy security web-of-things
Last synced: 11 Mar 2025
https://github.com/praetoriansentry/diceware
Really simple diceware passphrase genator
Last synced: 31 Mar 2026
https://github.com/sanketp1/slack-colaboration-tool-clone
A modern, full-stack Slack-like collaboration platform built with cutting-edge technologies, featuring real-time messaging, video calls, file sharing, and more.
docker fastapi livekit-sdk minio mongodb pnpm pnpm-monorepo python react redis security typescript
Last synced: 13 Apr 2026
https://github.com/varev-dev/publication-system-api
RESTful service designed for a digital publishing platform, serving as a real-world example of applying RBAC & ABAC in action.
access-control restful-api security
Last synced: 04 Mar 2026
https://github.com/alexismartinez1913/spring-security-login-registration
Proyecto que implementa un sistema de registro y autenticación de usuarios utilizando Spring Security, Spring MVC y Thymeleaf. La aplicación permite a los usuarios registrarse, iniciar sesión y acceder a secciones protegidas de la aplicación web.
java login security spring-boot spring-mvc thymeleaf
Last synced: 01 Apr 2026
https://github.com/kubepay/understanding-rbac
Understanding Role based security
aws containers docker docker-compose dockerfile jsp jwt kubernates microservices nginx oauth2 oidc openshift rbac react security servlet spring spring-boot tomcat
Last synced: 13 Apr 2026
https://github.com/dryvist/ansible-splunk
Ansible role for deploying and configuring Splunk Enterprise - includes HEC input, indexes, apps, and multi-disk storage with Doppler secrets integration
ansible automation devops enterprise infrastructure-as-code log-management logging monitoring observability security siem splunk
Last synced: 20 Jul 2026
https://github.com/usbshield/usbshield
USBShield protects your Windows from unauthorized USB devices
Last synced: 01 Apr 2026
https://github.com/cicerooslo/it-mta-sts
Static web app to host MTA-STS policy for Email
Last synced: 04 Mar 2026
https://github.com/nlink-jp/ir-tracker
Live incident response tracker — continuous ingestion, segmented analysis, and timeline visualization for ongoing IR conversations
cli cybersecurity gemini incident-response llm python security slack timeline vertex-ai
Last synced: 13 Apr 2026
https://github.com/edycutjong/shipghost
👻 Confidential Git PR Ghostwriter and Cryptographic Release Automator built for the Anna Hackathon
anna-app git-agent hackathon security
Last synced: 16 Jul 2026
https://github.com/akalmaliky-spec/detroit-family-home-care-api
Detroit Family Home Care — FastAPI backend with DFHC scaffold
backend docker fastapi healthcare python rest-api security sqlalchemy
Last synced: 01 Apr 2026
https://github.com/samuelba/traefik_crowdsec_bouncer
A service written in Rust that acts as a CrowdSec bouncer for the Traefik ForwardAuth middleware.
crowdsec crowdsec-bouncer docker rust rust-lang security traefik traefik-v2
Last synced: 05 Mar 2026
https://github.com/charlesbulabula/zero-trust-framework
Zero Trust network security framework with policy enforcement
kubernetes mtls opa policy-engine security spiffe zero-trust
Last synced: 03 Jun 2026
https://github.com/xarf/xarf-spec
XARF v4 Specification - Schemas, documentation, and samples for the eXtended Abuse Reporting Format
abuse-reporting documentation json-schema samples security specification v4 xarf
Last synced: 01 Apr 2026
https://github.com/aihxp/sumac
Sumac: bring out what your tools can do — one Rust binary to bridge skills, MCP, and APIs. Run any skill as an MCP server, any MCP server as a CLI, and any API from your terminal.
ai api-client automation cli developer-tools graphql mcp mcp-server model-context-protocol openapi rust security skills
Last synced: 08 Apr 2026
https://github.com/ramizpolic/laravel-auth
Laravel boilerplate with advanced authorization and API policies
auth authorization authz boilerplate iam laravel security
Last synced: 16 Apr 2026
https://github.com/xransum/valkyrie-tools
A security tools suite built for humans.
cli command-line information-gathering network-analysis python security security-tools
Last synced: 10 Mar 2026
https://github.com/relitrix/mic
Modrinth Integrity Checker
flowbite minecraft modrinth react security tailwindcss vite
Last synced: 02 Apr 2025
https://github.com/forwardemail/sslmonitor.com
Never miss an SSL certificate expiration again. Get timely alerts, monitor certificate status, and ensure continuous website security with our SSL monitoring solution.
alerting alerts automated certificate check checker cron cronjob crontab expiration expiry monitor monitoring security solution ssl status website
Last synced: 06 Jul 2025
https://github.com/papy139/osint-dork-generator
Générateur de Google Dorks OSINT — application autonome en un seul fichier HTML, sans dépendance ni serveur.
google-dorks osint security single-file vanilla-js
Last synced: 30 May 2026
https://github.com/guardian/wazup
Automated deployment of Wazuh configuration changes
security vulnerability-detection wazuh
Last synced: 06 Sep 2025
https://github.com/akornatskyy/wheezy.security
A lightweight security/cryptography library
cryptography python security wheezy
Last synced: 28 Apr 2025
https://github.com/omnipotence-eth/godspeed-coding-agent
Security-first open-source coding agent with 4-tier permissions, hash-chained audit trails, and 200+ LLM provider support
ai audit-trail cli coding-agent developer-tools litellm llm ollama open-source security
Last synced: 17 Apr 2026
https://github.com/penguintechinc/skauswatch
Cloud security platform: S3 malware scanning (ClamAV/YARA) with threat intelligence enrichment, vulnerability detection, EDR endpoint monitoring, enterprise secrets management with JIT access (IceBox), and AI-powered code review integration (Darwin).
ai appsec behavior code-review edr enterprise monitoring scanner secrets-management security siem static-analysis threat-intelligence
Last synced: 01 Apr 2026
https://github.com/xsa/0x58.santolaria.net
My Personal Website
cybersecurity ibm infosec openbsd security
Last synced: 05 Mar 2026
https://github.com/farfarfun/funsecret
加密和安全工具包 - 提供加密、解密和安全相关功能
cryptography encryption farfarfun python secret security
Last synced: 05 Mar 2026
https://github.com/fabioc-aloha/alex_skill_mall
284 curated plugins for AI assistants across 16 categories: security, Azure, documentation, code quality, cloud infrastructure, and more. Works with GitHub Copilot. Drop into .github/skills/local/ and go.
agent-skills agentic-ai ai-assistant ai-governance ai-skills azure best-practices claude-code claude-skills copilot-skills critical-thinking cursor-skills devops github-copilot knowledge-base mcp prompt-engineering security skill-library skill-marketplace
Last synced: 30 May 2026
https://github.com/serhalp/npm.tax
npm supply chain risk explorer
npm security supply-chain-security
Last synced: 29 Jun 2026
https://github.com/virtuoworks/login-notify
Linux login notification script
bash debian linux mutt notification script security shell ubuntu
Last synced: 17 Apr 2026
https://github.com/7a6163/gem-audit
Ultra-fast, standalone security auditor for Gemfile.lock — written in Rust
audit bundler cli cve gemfile ruby ruby-on-rails rust security security-tools vulnerability-scanner
Last synced: 01 Apr 2026
https://github.com/jvz/musigma.blog
A blog about programming.
blog cryptography functional-programming java programming reactive scala security shell
Last synced: 08 Jan 2026
https://github.com/b-macker/naab-passage
🔒 Sovereign data gateway & PII protection - Zero leakage to LLMs and APIs with self-synthesizing architecture. HIPAA/GDPR compliant. Part of the NAAb Ecosystem.
anthropic api-gateway audit compliance data-privacy data-protection encryption gateway gdpr hipaa llm-proxy naab naab-ecosystem openai pii-protection polyglot privacy security soc2 zero-trust
Last synced: 06 Mar 2026
https://github.com/seconize-co/dhi
Dhi - Runtime Intelligence & Protection System. Sanskrit: Intellect | Perception | Clear Vision. Kernel-space eBPF security monitoring for AI agents.
agent-security agentic-ai ai-agents ebpf kernel linux monitoring runtime-protection runtime-security sandboxing security threat-detection
Last synced: 02 Apr 2026
https://github.com/l0g0rhythm/logtool
LogTool is an advanced toolkit, developed in PowerShell, for the collection, analysis, and reporting of Windows Event Logs, with a focus on security and efficiency.
auditing automation cli diagnostics-tool log-analysis powershell powershell-script reporting security security-audit security-auditing security-hardening security-tools windows windows-event-log
Last synced: 17 Apr 2026
