An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/jeremylongshore/moat

Verified Agent Capabilities Marketplace — MCP-first trust + policy + execution layer for agents

agents capabilities fastapi mcp policy receipts security trust

Last synced: 04 Apr 2026

https://github.com/artagon/artagon-containers

Hardened multi-arch OCI images for JVM workloads. JDK 25/26/Valhalla on Chainguard, Distroless, and UBI. Non-root, digest-pinned, SBOM-attested, Cosign-signed. Production-ready security-first containers for amd64/arm64.

chainguard cloud-native containers cosign distroless docker hardened java jdk26 jvm kubernetes multi-arch oci openjdk sbom security supply-chain ubi valhalla wolfi

Last synced: 30 Apr 2026

https://github.com/nlink-jp/ir-tracker

Live incident response tracker — continuous ingestion, segmented analysis, and timeline visualization for ongoing IR conversations

cli cybersecurity gemini incident-response llm python security slack timeline vertex-ai

Last synced: 13 Apr 2026

https://github.com/owieth/foundry-setup

Production-ready Foundry/Solidity project template with CI, static analysis, and GitHub Pages docs

ci-cd ethereum forge foundry-rs hardhat-alternative security smart-contracts solidity template

Last synced: 04 Apr 2026

https://github.com/thomasdesr/asgi-cross-origin-protection

Drop-in, token-free CSRF protection for any ASGI app, using Fetch Metadata. No dependencies.

asgi cross-origin csrf fastapi fetch-metadata middleware security starlette

Last synced: 22 Jul 2026

https://github.com/h4cd0c/nimbus-mcp

Nimbus - AWS Security Assessment MCP Server | 43 Tools | Multi-Region Scanning | TRA Reports | CIS/NIST/PCI-DSS Compliance

aws aws-security cis-benchmark cloud-security compliance cybersecurity devsecops eks iam infosec mcp nist pci-dss penetration-testing red-team s3-security security terraform threat-detection vulnerability-scanner

Last synced: 14 Feb 2026

https://github.com/zametkikostik/secure-telegram-client

🔐 Liberty Reach Messenger v2.0 — Приватный мессенджер с post-quantum шифрованием, P2P-сетью и 24/7 Cloudflare

ai android bots cloudflare decentralized defi encryption kyber messenger p2p post-quantum privacy react-native rust security self-hosted steganography tauri web3 webrtc

Last synced: 04 Apr 2026

https://github.com/bnema/sekeve

CLI secret manager with GPG encryption and gRPC sync. Built with Go 1.26 runtime/secret memory protection.

cli encryption golang gpg grpc password-manager secret-manager security

Last synced: 04 Apr 2026

https://github.com/akacase/dns-compliance-testing

flake for dns-compliance-testing

dns nix security

Last synced: 11 Jun 2026

https://github.com/suahnkim/iaslab.org2_test

iaslab is a leading government funded research group studying image security impact, evaluation of SNS in terms of how it manages users' images, image compression, and image enhancement.

image lab privacy research-lab security security-impact sns

Last synced: 09 Feb 2026

https://github.com/meblabs/security-workflow

Reusable GitHub Actions workflow for the MEBlabs open-source security gate.

github-actions security

Last synced: 14 Jun 2026

https://github.com/systemslibrarian/secure-file-upload-dotnet

Production-grade 8-layer file upload security pipeline for ASP.NET Core 8, with an AI red-team adversarial security analysis.

aspnet-core csharp defense-in-depth dotnet file-upload- security

Last synced: 01 Jun 2026

https://github.com/everdrone/genpwd

Generates iOS style strong password suggested by Safari

cli generator go golang password password-generator secure security

Last synced: 09 Feb 2026

https://github.com/systemslibrarian/postquantum-jwt

PostQuantum.Jwt — Modern post-quantum hybrid JWT library for .NET 10 using X-Wing (X25519 + ML-KEM-768) and ML-DSA signatures.

cryptography csharp dotnet hybrid-cryptography jwt ml-dsa ml-kem post-quantum pqc security tokens x-wing

Last synced: 01 Jun 2026

https://github.com/karlkfi/claude-workspace-guard

Path-aware bash permissions for Claude Code.

bash claude-code claude-code-plugin guardrail hooks sandbox security

Last synced: 04 Jun 2026

https://github.com/forwardemail/sslmonitor.com

Never miss an SSL certificate expiration again. Get timely alerts, monitor certificate status, and ensure continuous website security with our SSL monitoring solution.

alerting alerts automated certificate check checker cron cronjob crontab expiration expiry monitor monitoring security solution ssl status website

Last synced: 06 Jul 2025

https://github.com/decoy-run/decoy-scan

Security scanner for MCP server configurations. Like npm audit, but for your AI agent tool servers. Finds risky tools, input validation gaps, transport vulnerabilities, and over-permissioned capability chains. Open source, zero dependencies.

ai-agent cli mcp owasp prompt-injection sarif scanner security supply-chain tool-poisoning

Last synced: 04 Apr 2026

https://github.com/sachinsagrawal/anti-rickroll

A Chrome extension that displays a warning when you navigate to known YouTube rickrolls.

chrome-extension rickroll security warning youtube

Last synced: 15 Apr 2026

https://github.com/guardian/wazup

Automated deployment of Wazuh configuration changes

security vulnerability-detection wazuh

Last synced: 06 Sep 2025

https://github.com/anubhavg-icpl/gansi-rs

Gansi — Windows AMSI COM provider & CLI in Rust

amsi antivirus com named-pipe powershell rust security windows

Last synced: 20 Jul 2026

https://github.com/venkatesh-bharath/employee-management

A real-time project covering core Spring Boot concepts like CRUD operations, JPA, validation, security with JWT, exception handling, Swagger, and caching. It also includes advanced features like pagination, file uploads, Actuator, and microservices integration

actuator-spring-boot caching exception-handling h2-database junit5 jwt-token logging mysql pagination security spring-boot spring-data-jpa swagger-ui validation

Last synced: 18 Apr 2026

https://github.com/john0isaac/protect-my-dir

A command-line tool designed to encrypt and decrypt files within a directory using a password.

encryption python security

Last synced: 26 Feb 2026

https://github.com/atkei/piccolo-sql-guard

Static analysis tool for detecting unsafe raw SQL construction in Piccolo ORM projects

piccolo pyton security sql-injection static-analysis

Last synced: 15 Jun 2026

https://github.com/sunilp/aip-openclaw

AIP security plugin for OpenClaw: skill signing, capability manifests, runtime enforcement

agent-identity ai-agents ai-security audit-log capability-manifest mcp openclaw runtime-enforcement security skill-signing

Last synced: 04 Jun 2026

https://github.com/nrednav/pi-redactor

Pi extension that redacts sensitive strings from messages before the LLM provider sees them.

llm pi-extension pi-package privacy redaction redactor security

Last synced: 05 Apr 2026

https://github.com/friedjof/wireguardadmin

A modern web interface for managing WireGuard VPNs with live status, firewall management, and real-time updates.

admin api deshboard docker firewall flask iptables linux management monitoring network peer python realtime security vpn webinterface websocket wireguard

Last synced: 15 Apr 2026

https://github.com/pritchyspritch/loldeps

LOLDeps stands for Living Off the Land Dependencies, it is a simple lightweight python tool that uses native package managers to highlight vulnerabilities in your package manifests and alerts you when it finds issues.

dependencies dotnet gem npm python security

Last synced: 02 Feb 2026

https://github.com/caswire/caswire-website

Docs site of Caswire: https://github.com/casbin/caswire

antivirus casbin casdoor casware docs docusaurus firewall host ids security site

Last synced: 22 Jul 2026

https://github.com/yasirhamza/wazuh-firewalla

Wazuh SIEM integration for Firewalla with threat intelligence and Windows SRP monitoring

docker firewalla security siem threat-intelligence wazuh

Last synced: 05 Apr 2026

https://github.com/purrproof/capture-the-ether-solved

Capture The Ethers CTF solutions using Hardhat, Ethers@6, Typescript.

capturetheether ctf ctf-solutions ctf-writeups ethereum hardhat security solidity

Last synced: 09 May 2026

https://github.com/evanshortiss/redhat-mobile-demo-application

Application that is designed to be easily modified to demo AeroGear's device security checks

aerogear android cordova demo ionic ios javascript phonegap security typescript

Last synced: 05 Apr 2026

https://github.com/zekele-win/zkvault-basic

A minimal, functional zero-knowledge proof project based on zkSNARKs, designed to help developers understand the fundamental workflow of zk applications—including circuit writing, proof generation, and smart contract verification.

circom learning-project privacy security solidity web3 zero-knowledge zk-snark

Last synced: 18 Apr 2026

https://github.com/jemo19/infra-plan-scanner

Terraform/OpenTofu plan scanner for security, tagging, deletion, and cost-risk checks.

devops github-actions iac opentofu policy-as-code security terraform

Last synced: 16 Jun 2026

https://github.com/kosiorkosa47/rustinel

Defensive supply-chain risk diff for Rust/Cargo: typosquats, phone-home build.rs, secret-exfil malware, SBOM/VEX. cargo rustinel.

cargo cargo-plugin devsecops rust sbom security supply-chain vulnerability

Last synced: 16 Jun 2026

https://github.com/quarkiverse/quarkus-openid-ssf

Quarkus Extensions supporting the Shared Signals Framework (SSF)

caep keycloak oidc quarkus-extension rfc8417 rfc8935 rfc8936 risc secevent security set shared-signals ssf

Last synced: 04 Jun 2026

https://github.com/sovereigncloudstack/security-infra-scan-pipeline

Security scanning pipeline in Zuul focussed on dynamic infra tests

security

Last synced: 04 Jun 2026

https://github.com/diodoreos/sigil-vault

A secure URL shortener with optional PIN protection, AES encryption, and self-destructing links.

css3 educational educational-project html-css-javascript html-css-javascript-php html5 javascript myphpadmin php php8 security

Last synced: 19 Apr 2026

https://github.com/akornatskyy/wheezy.security

A lightweight security/cryptography library

cryptography python security wheezy

Last synced: 28 Apr 2025

https://github.com/vsoch/singularity-clair

testing running clair with a singularity image

clair container coreos security singularity singularity-container vulnerability

Last synced: 19 Apr 2026

https://github.com/securityronin/exec-pe-forensic

PE (Windows executable) forensic analyzer — pe-core parses PE32/PE64 headers (sections, imports, entropy); pe-analysis grades MITRE-tagged anomalies (suspicious imports, packing/entropy, process-injection IOCs)

dfir forensics incident-response malware-analysis mitre-attack packer-detection pe portable-executable rust rust-forensics security windows

Last synced: 21 Jun 2026

https://github.com/mauricelambert/websitecloner

This package implement a Web Site Cloner and his HTTP server to launch it.

clone pypi-package python3 security website

Last synced: 30 May 2026

https://github.com/stm32-hotspot/b_u585_iota02_aws_iot

AWS IoT reference Integration for STM32U585

aws fleet-provisioning iot lwip mbedtls mqtt security stm32 stsafe

Last synced: 20 Apr 2026

https://github.com/declaw-ai/mcp-sandbox

Sandbox any MCP server in one line. Firecracker microVM isolation for Claude Desktop, Cursor, Windsurf, and every MCP client.

ai-security claude-desktop cursor firecracker isolation mcp mcp-server sandbox security

Last synced: 17 Jun 2026

https://github.com/nir3x/cryptorand.cpp

CryptoRand.cpp - Random Key Generation using Cryptographic Techniques

algorithm algorithms c-plus-plus cpp cryptography encryption entropy random random-number-generation security

Last synced: 04 Jun 2026

https://github.com/abinavkrishnaa/ciphertalk

CipherTalk 🔒💬 is an AI-powered, end-to-end encrypted messaging app built with FastAPI, PostgreSQL, and WebSockets for real-time secure communication. It features AES/RSA encryption, JWT authentication, and AI-driven smart replies. Designed for privacy, scalability, and industry-level security. 🚀

ai authentication backend-api database django django-rest-framework python3 security

Last synced: 20 Apr 2026

https://github.com/thomasvincent/cloudflare-ufw-sync

Automated synchronization of Cloudflare IP ranges with UFW firewall rules. Enterprise-grade security tool for Linux servers using Cloudflare CDN/WAF

automation cloudflare cloudflare-api debian devops firewall firewall-rules infrastructure linux network-security networking python security sync system-administration ubuntu ufw

Last synced: 31 Jan 2026

https://github.com/farchanjo/merkle

Local-first MCP vault for Claude Code — LLMs hold opaque handles, operators approve every reveal, every access leaves a BLAKE3 hash. Rust 2024 / DDD + Hexagonal.

argon2id audit-log blake3 claude-code cryptography ddd ed25519 hexagonal-architecture local-first mcp model-context-protocol rust rust-2024 secrets secrets-management security spec-driven-development sqlite vault xchacha20-poly1305

Last synced: 17 Jun 2026

https://github.com/brunexgeek/net-bouncer

Honeypot program that logs connection attempts and refuses them

fail2ban honeypot security

Last synced: 17 Jun 2026

https://github.com/afshinator/mcp-server-go-quality

One MCP server for golangci-lint, govulncheck, and nilaway — a unified `Diagnostic[]` array with consistent file:line:column navigation, parallel execution, and zero-config auto-install.

code-quality go golang linting mcp mcp-server security

Last synced: 17 Jun 2026

https://github.com/mrxx0/ft_ssl_md5

An introduction to cryptographic hashing algorithms.

cryptography security ssl

Last synced: 03 Aug 2025

https://github.com/arilsonpmiranda/op-cap

🎥 Stabilize and optimize Linux USB capture devices for OBS with features like auto-reconnect, driver recovery, and performance enhancements.

barometer capi clusterapi data-collection detection form-builder full-stack gyroscope imu legaltech multilingual openai opencv3 react research security sensors-capture typescript video-capture

Last synced: 08 Jan 2026

https://github.com/mjholub/wiper

simple program for overwriting free disk space, written in rust

data-erasure formatting privacy privacy-protection privacy-tools security security-tools suckless wiping

Last synced: 21 Apr 2026

https://github.com/madret/elastic

Elastic stack detection lab setup with Docker.

detection-engineering docker docker-compose elasticstack security siem

Last synced: 21 Apr 2026

https://github.com/aslafy-z/coreruleset-plugins-image

OWASP CRS plugins as a minimal, signed OCI image for Coraza/Envoy WAFs.

coraza coreruleset cosign envoy image-volume kubernetes modsecurity oci-image owasp-crs security slsa waf

Last synced: 18 Jun 2026

https://github.com/timothywarner-org/github-copilot-cybersecurity-professionals

GitHub Copilot for Cybersecurity Professionals - Microsoft Press/Pearson video course for skills development

copilot cybersecurity devsecops github-copilot microsoft-press pearson security video-course

Last synced: 25 Feb 2026

https://github.com/rnowotniak/htb2007

Hierarchical Token Bucket (traffic shaping on Linux)

firewall linux security traffic-shaping

Last synced: 05 Jun 2026

https://github.com/kevinburbanodev/archgo

🚀 Go template with hexagonal architecture, Gin Framework, JWT, Rate Limiting, Swagger, and Docker. Includes testing, security, and full documentation.

api clean-architecture docker gin gin-framework go golang gorm hexagonal-architecture jwt postgresql rate-limiting rest-api security swagger testing

Last synced: 15 Apr 2026

https://github.com/loupe-tools/loupe

100% offline, single HTML file security analyser for 60+ file formats — Office docs, PDFs, executables (PE/ELF/Mach-O), emails, certificates, OpenPGP, JAR, SVG, archives, scripts, plists, EVTX and SQLite. 475+ built-in YARA rules, VBA macro analysis, IOC extraction, recursive payload decoding, STIX 2.1 / MISP export.

evtx file-analysis incident-response malware-analysis offline security single-file static-analysis threat-detection yara

Last synced: 02 May 2026

https://github.com/brandonhon/tls-cert-monitor

Production-ready SSL/TLS certificate monitoring tool with Prometheus metrics

cetificate-monitoring cross-platform monitoring nuitka prometheus python security ssl tls

Last synced: 31 Jan 2026

https://github.com/aidant/lazy-oauth2-service-worker-vault

Keep your OAuth 2.0 tokens secure and up-to-date.

authentication oauth oauth2 security service vault worker

Last synced: 31 Jan 2026

https://github.com/moorada/gcpapikeyauditor

Static HTML/CSS/JS app to audit a Google Cloud API key

apikey audit cloud gcp penetration-testing redteam security

Last synced: 18 Jun 2026

https://github.com/sht/sek4

Web for CS experiments, self-hosted tools, and personal projects. Built with Zola.

homepage security static-site-generator zola-site

Last synced: 19 Jun 2026

https://github.com/aboehm/clt2025-secret-management

Vortrag auf Chemnitzer Linux Tage 2025 über Secret Management im Umfeld von IaC

ansible chemnitzer-linux-tage kubernetes opentofu sealed-secrets security security-tools sops terraform vault

Last synced: 15 Apr 2026

https://github.com/luqastw/passtw

passtw is a Python-based random password generator + encrypted local vault, using AES‑128 encryption and a cryptographic key.

cli cryptography password password-generator python security security-tools terminal

Last synced: 17 Mar 2026

https://github.com/liteobject/pihole-llm-analytics

AI-powered DNS log analyzer for Pi-hole - detect suspicious domains, traffic patterns, and security threats using gpt-oss.

dns gpt-oss network-security ollama pi-hole python security

Last synced: 15 Apr 2026

https://github.com/akz4ol/agentlint

Supply-chain security for AI agent configurations. Scan Claude Code, Cursor, and CLAUDE.md files for risky patterns.

ai ai-agents claude cli cursor devops devsecops linter sarif security static-analysis supply-chain supply-chain-security typescript

Last synced: 31 Jan 2026

https://github.com/sht/passify

A beautiful, open-source password generator with custom rules and history. Simple, secure, and ready to use anywhere.

flask opensource passify password-generator security selfhost

Last synced: 19 Jun 2026

https://github.com/mreshboboyev/windows-api

A .NET application that generates unique hardware-based identifiers for Windows systems using WMI (Windows Management Instrumentation) queries to gather system information from CPU, BIOS, base board, disk drives, and TPM.

dotnet-core hardware-id security system-information unique-identifier windows-api wmi

Last synced: 30 Jan 2026

https://github.com/diomonogatari/mcp-guard

Roslyn analyzer that flags MCP tool-poisoning in your C# servers before it ships.

csharp dotnet mcp prompt-injection roslyn roslyn-analyzer security static-analysis

Last synced: 06 Jun 2026

https://github.com/anky2901/repo-xray

Local-first repository intelligence — security, architecture, dependencies, tests, CI, release readiness, and more, with explainable findings.

cli code-quality developer-tools monorepo sarif security static-analysis typescript

Last synced: 24 Jul 2026

https://github.com/jersyfi/laravel-verify-email

Compact package for email verification in laravel. It is customizable like laravel breeze because of publishing all files to your laravel application.

email email-verification laravel laravel-breeze laravel-framework laravel-package php security verification verification-email

Last synced: 30 Jan 2026

https://github.com/wille/package-policy

Package policies for Node.js repos to protect against supply chain attacks

dependencies node nodejs npm pnpm security supply-chain-security yarn

Last synced: 06 Feb 2026

https://github.com/lvm/wargames

notes about ethical "hacking" games.

security wargame

Last synced: 29 Jan 2026

https://github.com/filipnet/fail2ban-ops

fail2ban-ops is a collection of scripts designed to assist with the management, monitoring, and automation of Fail2Ban. These tools allow system administrators to easily check the status of Fail2Ban jails, unban IP addresses, and analyze blocked IP statistics in a firewall environment.

automation bash-script fail2ban fail2ban-tools firewall-management firewalld ip-blocking security security-tools server-security unban-ip

Last synced: 24 Apr 2026

https://github.com/deepaksorthiya/spring-boot-keycloak-authorization

Spring Boot Security Keycloak Policy ABAC Authorization

abac access-control policy security spring-boot spring-security

Last synced: 24 Apr 2026

https://github.com/basel5001/secret-vault

HashiCorp Vault deployment as code: auto-unseal, secret rotation, K8s CSI integration

auto-rotation aws-kms hashicorp-vault kubernetes secrets-management security terraform

Last synced: 24 Jul 2026

https://github.com/scottbrown/hardtarget

A serverless solution to provide security assessments of newly built AMIs.

aws security serverless

Last synced: 28 Jan 2026

https://github.com/h4x0r/1-click-github-sec

One-click install basic security controls for GitHub-managed projects

devsecops security security-tools

Last synced: 24 Jan 2026

https://github.com/solomonneas/cortex-mcp

MCP server for Cortex observable analysis and response engine

ai-agents automation cortex mcp model-context-protocol observable-analysis security soar

Last synced: 25 Apr 2026

https://github.com/solomonneas/sophos-mcp

MCP server for Sophos Central — endpoint management, EDR/XDR detections, alerts, Live Discover queries, and security policies

ai-agents api endpoint-protection integration mcp model-context-protocol security sophos

Last synced: 25 Apr 2026

https://github.com/zufardhiyaulhaq/asdf-starboard

Starboard plugin for the asdf version manager

asdf asdf-plugin security security-tools starboard

Last synced: 14 Jul 2026

https://github.com/brooksomics/llm-rustyolo

Secure Docker wrapper for AI coding agents with filesystem, privilege, and network isolation

ai ai-agents anthropic claude claude-code coding-assistant containers docker firewall llm network-isolation rust sandbox security

Last synced: 24 Jan 2026

https://github.com/kuladog/fedora-xfce-minimal

A simple bash script and configs to setup a secure Fedora Xfce Minimal workstation

configs dotfiles fedora hardened linux minimal security setup-script xfce

Last synced: 18 Apr 2026

https://github.com/tatilimongi/simple-authentication-system

A secure authentication system implementing bcrypt for password hashing, developed as a classroom exercise for the Secure Development course

authentication bcrypt encription hashing-algorithm java login-system password-hashing secure-coding security university-project

Last synced: 25 Apr 2026

https://github.com/ribafs/laravel6-acl

Package to ACL implements Laravel 6

access acl laravel laravel6 php security

Last synced: 27 Feb 2026

https://github.com/fridex/pip-provenance

Files supporting an article about PEP-710.

hack hacktoberfest-accepted provenance python security

Last synced: 06 Jun 2026

https://github.com/falcoraxyz/mincode-vuln-arch

Minimal code generator + vuln auditor + architecture miner with a local HMAC-signed hash-chain Obsidian vault. Zero-dep, Hermes skill.

cli-tool code-generation hermes knowledge-base obsidian python security static-analysis

Last synced: 19 Jul 2026

https://github.com/ar-ecommerce-platform/auth-service

Handles user authentication and JWT management

authentication jwt security spring-boot

Last synced: 13 Apr 2026